{"id":"https://openalex.org/W7118123805","doi":"https://doi.org/10.31449/inf.v49i36.9768","title":"GAGA-Net: A GAN and GNN Hybrid Model for Enhanced Network Anomaly Detection in Cybersecurity","display_name":"GAGA-Net: A GAN and GNN Hybrid Model for Enhanced Network Anomaly Detection in Cybersecurity","publication_year":2025,"publication_date":"2025-12-20","ids":{"openalex":"https://openalex.org/W7118123805","doi":"https://doi.org/10.31449/inf.v49i36.9768"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v49i36.9768","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v49i36.9768","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9768/6088","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/9768/6088","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121911179","display_name":"Ying Li","orcid":null},"institutions":[{"id":"https://openalex.org/I153904384","display_name":"University of Languages and International Studies","ror":"https://ror.org/01z1bn264","country_code":"VN","type":"education","lineage":["https://openalex.org/I153904384"]},{"id":"https://openalex.org/I4210100789","display_name":"Wuhan College","ror":"https://ror.org/01dashf18","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210100789"]}],"countries":["CN","VN"],"is_corresponding":true,"raw_author_name":"Ying Li","raw_affiliation_strings":["Wuhan College of Foreign Languages and Foreign Affairs"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan College of Foreign Languages and Foreign Affairs","institution_ids":["https://openalex.org/I153904384","https://openalex.org/I4210100789"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5121911179"],"corresponding_institution_ids":["https://openalex.org/I153904384","https://openalex.org/I4210100789"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.58722764,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"49","issue":"36","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8939999938011169,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8939999938011169,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.03229999914765358,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.010599999688565731,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6919000148773193},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6704000234603882},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6333000063896179},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.612500011920929},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.585099995136261},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5115000009536743},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.45100000500679016},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.4246000051498413},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.37049999833106995}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7027999758720398},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6919000148773193},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6704000234603882},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6333000063896179},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.612500011920929},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.585099995136261},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.541100025177002},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5202000141143799},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5115000009536743},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.45100000500679016},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4246000051498413},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3910999894142151},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.37049999833106995},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.3571999967098236},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35659998655319214},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3077000081539154},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29760000109672546},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.2953000068664551},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.28870001435279846},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v49i36.9768","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v49i36.9768","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9768/6088","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v49i36.9768","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v49i36.9768","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9768/6088","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W7118123805.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"network":[1,59],"threats":[2],"increase":[3],"in":[4,58,150],"complexity,":[5],"traditional":[6,138],"signature-":[7],"and":[8,27,92,108,143,152,170],"rule-based":[9],"detection":[10,37,176],"systems":[11],"find":[12],"it":[13],"challenging":[14],"to":[15,44,54,69,79,164],"recognize":[16],"unexpected":[17],"or":[18],"zero-day":[19,157],"attacks.":[20],"This":[21],"study":[22],"presents":[23],"GAGA-Net":[24,96,166],"(Generative":[25],"Adversarial":[26,41],"Graph-based":[28],"Anomaly":[29],"Network),":[30],"an":[31,98,118,160],"innovative":[32],"hybrid":[33],"framework":[34],"for":[35,173],"anomaly":[36],"that":[38],"combines":[39],"Generative":[40],"Networks":[42,52],"(GANs)":[43],"model":[45,146],"benign":[46,67],"traffic":[47],"distributions":[48],"with":[49,117,159],"Graph":[50],"Neural":[51],"(GNNs)":[53],"capture":[55],"spatiotemporal":[56],"relationships":[57],"traffic.":[60],"The":[61,145],"GAN":[62],"component":[63],"is":[64],"trained":[65],"on":[66,83,115],"samples":[68],"identify":[70],"behavioral":[71],"abnormalities,":[72],"whereas":[73],"the":[74,135],"GNN":[75],"employs":[76],"graph-structured":[77],"representations":[78],"categorize":[80],"anomalies":[81],"based":[82],"structural":[84],"discrepancies.":[85],"Upon":[86],"evaluation":[87],"using":[88],"NSL-KDD,":[89,116],"CICIDS":[90],"2017,":[91],"a":[93,102,109,168],"real-world":[94],"dataset,":[95],"attains":[97],"accuracy":[99],"of":[100,106,113,122,137,162],"97.35%,":[101],"false":[103,110],"positive":[104],"rate":[105,112],"2.10%,":[107],"negative":[111],"1.80%":[114],"average":[119],"inference":[120],"time":[121],"120":[123],"milliseconds":[124],"per":[125],"sample,":[126],"thereby":[127],"exhibiting":[128],"real-time":[129],"capability.":[130],"These":[131],"results":[132],"substantially":[133],"exceed":[134],"performance":[136],"models":[139],"such":[140],"as":[141],"CNN-LSTM":[142],"Autoencoder-IDS.":[144],"has":[147],"significant":[148],"robustness":[149],"noisy":[151],"adversarial":[153],"conditions,":[154],"successfully":[155],"detecting":[156],"assaults":[158],"efficacy":[161],"up":[163],"92%.":[165],"provides":[167],"scalable":[169],"generalizable":[171],"solution":[172],"contemporary":[174],"intrusion":[175],"issues.":[177]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-04T00:00:00"}