{"id":"https://openalex.org/W4401612365","doi":"https://doi.org/10.23919/ifipnetworking62109.2024.10619828","title":"AB-TCAD: An Access Behavior-Based Two-Stage Compromised Account Detection Framework","display_name":"AB-TCAD: An Access Behavior-Based Two-Stage Compromised Account Detection Framework","publication_year":2024,"publication_date":"2024-06-03","ids":{"openalex":"https://openalex.org/W4401612365","doi":"https://doi.org/10.23919/ifipnetworking62109.2024.10619828"},"language":"en","primary_location":{"id":"doi:10.23919/ifipnetworking62109.2024.10619828","is_oa":false,"landing_page_url":"http://dx.doi.org/10.23919/ifipnetworking62109.2024.10619828","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IFIP Networking Conference (IFIP Networking)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024111502","display_name":"HU Kunling","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"H. Kunling","raw_affiliation_strings":["Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"L. Fenghua","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"L. Fenghua","raw_affiliation_strings":["Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075088248","display_name":"Jessie Hui Wang","orcid":"https://orcid.org/0000-0002-7825-4137"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jessie Hui Wang","raw_affiliation_strings":["Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100399389","display_name":"Han Zhang","orcid":"https://orcid.org/0009-0000-0082-1667"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Zhang","raw_affiliation_strings":["Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Network Sciences and Cyberspace, BNRist, Tsinghua University,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113336259","display_name":"Yiren Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yiren Zhao","raw_affiliation_strings":["University of Toronto,Toronto,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Toronto,Toronto,Canada","institution_ids":["https://openalex.org/I185261750"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20033729,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"104","last_page":"112"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9648000001907349,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9648000001907349,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9290000200271606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9280999898910522,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6269975304603577},{"id":"https://openalex.org/keywords/stage","display_name":"Stage (stratigraphy)","score":0.42448747158050537},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.10656911134719849}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6269975304603577},{"id":"https://openalex.org/C146357865","wikidata":"https://www.wikidata.org/wiki/Q1123245","display_name":"Stage (stratigraphy)","level":2,"score":0.42448747158050537},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.10656911134719849},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/ifipnetworking62109.2024.10619828","is_oa":false,"landing_page_url":"http://dx.doi.org/10.23919/ifipnetworking62109.2024.10619828","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IFIP Networking Conference (IFIP Networking)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.5099999904632568}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322392","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1924770834","https://openalex.org/W1959608418","https://openalex.org/W2130942839","https://openalex.org/W2187846933","https://openalex.org/W2230089931","https://openalex.org/W2258759058","https://openalex.org/W2397135192","https://openalex.org/W2511293593","https://openalex.org/W2743269056","https://openalex.org/W2797557910","https://openalex.org/W2898395483","https://openalex.org/W2898610665","https://openalex.org/W2904890881","https://openalex.org/W2909431601","https://openalex.org/W2946985165","https://openalex.org/W2966841471","https://openalex.org/W2999449913","https://openalex.org/W3010831033","https://openalex.org/W3151793507","https://openalex.org/W3153872861","https://openalex.org/W3169637772","https://openalex.org/W4294170691","https://openalex.org/W6640212811","https://openalex.org/W6640963894","https://openalex.org/W6679436768","https://openalex.org/W6688513127","https://openalex.org/W6711907643","https://openalex.org/W6750557309","https://openalex.org/W6762003241","https://openalex.org/W6763152702","https://openalex.org/W6771719140","https://openalex.org/W6796314857","https://openalex.org/W7016021835"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"In":[0,63,78,137],"the":[1,33,53,79,138],"fast-growing":[2],"Internet,":[3],"legitimate":[4],"user":[5,102,124],"accounts":[6],"can":[7],"be":[8],"stolen":[9],"by":[10],"attackers,":[11],"posing":[12],"a":[13,84,92,169,175],"serious":[14],"threat":[15],"to":[16,59,160],"network":[17],"security.":[18],"Therefore,":[19],"compromised":[20,72,165],"account":[21,73],"detection":[22,74],"is":[23,30],"an":[24,68,107,143],"urgent":[25],"problem.":[26],"Most":[27],"existing":[28,184],"work":[29],"based":[31],"on":[32],"behavior":[34,46,126,153],"and":[35,56,116,127,157,191],"content":[36],"associated":[37],"with":[38],"posts.":[39],"However,":[40],"these":[41],"approaches":[42],"cannot":[43],"detect":[44,161],"anomalous":[45],"that":[47,90,110,130,181],"attackers":[48],"only":[49],"collect":[50],"information":[51],"in":[52,101,154,186],"early":[54],"stage,":[55,81,140],"often":[57],"fail":[58],"consider":[60],"temporal":[61,145,149],"features.":[62],"this":[64],"paper,":[65],"we":[66,82,105,141],"propose":[67,83,142],"access":[69,95,103,125,152],"behavior-based":[70],"two-stage":[71],"framework,":[75],"called":[76,87],"AB-TCAD.":[77],"first":[80],"novel":[85],"feature":[86],"URL":[88,114],"graph":[89],"depicts":[91],"user's":[93],"website":[94],"pattern.":[96],"To":[97],"analyze":[98],"abnormal":[99],"changes":[100,134],"patterns,":[104],"design":[106],"AddEdge-GNN":[108,120],"algorithm":[109],"detects":[111],"similarities":[112],"between":[113],"graphs":[115],"obtains":[117],"suspicious":[118],"accounts.":[119,166],"predicts":[121],"potential":[122],"new":[123],"reduces":[128],"misjudgments":[129],"treat":[131],"normal":[132],"behavioral":[133],"as":[135],"anomalies.":[136],"second":[139],"RVAE-based":[144],"detection.":[146],"We":[147,167],"construct":[148],"features":[150],"of":[151,188],"multiple":[155],"dimensions":[156],"use":[158],"RVAE":[159],"anomalies,":[162],"thereby":[163],"identifying":[164],"perform":[168],"real-world":[170],"evaluation":[171],"using":[172],"data":[173],"from":[174],"production":[176],"network.":[177],"The":[178],"results":[179],"show":[180],"AB-TCAD":[182],"outperforms":[183],"solutions":[185],"terms":[187],"both":[189],"precision":[190],"recall":[192],"metrics.":[193]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}