{"id":"https://openalex.org/W3040320120","doi":"https://doi.org/10.3233/jifs-200694","title":"APT attack detection based on flow network analysis techniques using deep learning","display_name":"APT attack detection based on flow network analysis techniques using deep learning","publication_year":2020,"publication_date":"2020-07-07","ids":{"openalex":"https://openalex.org/W3040320120","doi":"https://doi.org/10.3233/jifs-200694","mag":"3040320120"},"language":"en","primary_location":{"id":"doi:10.3233/jifs-200694","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-200694","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070501985","display_name":"Cho Do Xuan","orcid":"https://orcid.org/0000-0002-6334-1262"},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Cho Do Xuan","raw_affiliation_strings":["Department of Information Assurance, FPT University, Hanoi, Vietnam","Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Assurance, FPT University, Hanoi, Vietnam","institution_ids":["https://openalex.org/I109689652"]},{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109184375","display_name":"Mai Hoang Dao","orcid":"https://orcid.org/0000-0002-4085-7100"},"institutions":[{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Mai Hoang Dao","raw_affiliation_strings":["Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101742692","display_name":"Hoa D. Nguyen","orcid":"https://orcid.org/0000-0003-2177-3478"},"institutions":[{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Hoa Dinh Nguyen","raw_affiliation_strings":["Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5070501985"],"corresponding_institution_ids":["https://openalex.org/I109689652","https://openalex.org/I4400600977"],"apc_list":null,"apc_paid":null,"fwci":4.2949,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.94251327,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"39","issue":"3","first_page":"4785","last_page":"4801"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.841697633266449},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7461440563201904},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7119235992431641},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6038163900375366},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4548110067844391},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.44161257147789},{"id":"https://openalex.org/keywords/perceptron","display_name":"Perceptron","score":0.4385311007499695},{"id":"https://openalex.org/keywords/warning-system","display_name":"Warning system","score":0.4305429458618164},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4305095076560974},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2855376899242401},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.2756009101867676}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.841697633266449},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7461440563201904},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7119235992431641},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6038163900375366},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4548110067844391},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.44161257147789},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.4385311007499695},{"id":"https://openalex.org/C29825287","wikidata":"https://www.wikidata.org/wiki/Q1427940","display_name":"Warning system","level":2,"score":0.4305429458618164},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4305095076560974},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2855376899242401},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2756009101867676},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jifs-200694","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-200694","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1498268535","https://openalex.org/W1936523258","https://openalex.org/W1992705187","https://openalex.org/W1996660070","https://openalex.org/W2064675550","https://openalex.org/W2073036619","https://openalex.org/W2093331366","https://openalex.org/W2100033648","https://openalex.org/W2110908300","https://openalex.org/W2143396794","https://openalex.org/W2143612262","https://openalex.org/W2150802402","https://openalex.org/W2295797531","https://openalex.org/W2408793237","https://openalex.org/W2494465889","https://openalex.org/W2553168104","https://openalex.org/W2567869469","https://openalex.org/W2600702321","https://openalex.org/W2604146495","https://openalex.org/W2765085016","https://openalex.org/W2781133758","https://openalex.org/W2792815878","https://openalex.org/W2807648315","https://openalex.org/W2808323833","https://openalex.org/W2818789173","https://openalex.org/W2883062872","https://openalex.org/W2890988064","https://openalex.org/W2892038991","https://openalex.org/W2897104255","https://openalex.org/W2910019180","https://openalex.org/W2910711617","https://openalex.org/W2920971804","https://openalex.org/W2939867067","https://openalex.org/W2958620883","https://openalex.org/W2962703433","https://openalex.org/W2963441585","https://openalex.org/W2978236720","https://openalex.org/W2982518168","https://openalex.org/W2982640876","https://openalex.org/W2994155906","https://openalex.org/W2995102710","https://openalex.org/W3003861670","https://openalex.org/W3004179294","https://openalex.org/W4205947740"],"related_works":["https://openalex.org/W4293226380","https://openalex.org/W2082756648","https://openalex.org/W3194278305","https://openalex.org/W2289648981","https://openalex.org/W4313906399","https://openalex.org/W4321487865","https://openalex.org/W2811106690","https://openalex.org/W1565459987","https://openalex.org/W4239306820","https://openalex.org/W2947043951"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"attacks":[4,26,46,124,142,259],"are":[5,173],"a":[6,80,132,187,261,267],"form":[7],"of":[8,24,30,41,56,82,106,122],"malicious,":[9],"intentionally":[10],"and":[11,27,36,43,84,93,168,198,211,223],"clearly":[12],"targeted":[13],"attack.":[14],"This":[15,244],"attack":[16,63,181],"technique":[17],"is":[18,51,65,146,154,164,203,209,260],"growing":[19],"in":[20,47,149,227,240],"both":[21],"the":[22,28,39,48,57,120,161,228,237],"number":[23,81],"recorded":[25],"extent":[29],"its":[31],"dangers":[32],"to":[33,61,66,73,86,102,118,139,175,256],"organizations,":[34],"businesses":[35],"governments.":[37],"Therefore,":[38],"task":[40],"detecting":[42,179],"warning":[44],"APT":[45,62,107,123,141,180,258],"real":[49],"system":[50],"very":[52],"necessary":[53],"today.":[54],"One":[55],"most":[58],"effective":[59],"approaches":[60],"detection":[64,207,273],"apply":[67,114],"machine":[68,115,216],"learning":[69,72,116,138,171,190,217,250],"or":[70,99],"deep":[71,137,170,189,249,277],"analyze":[74,87],"network":[75,88,91,127,144,152,158,254,271],"traffic.":[76],"There":[77],"have":[78],"been":[79],"studies":[83,112],"recommendations":[85],"traffic":[89,153],"into":[90,156],"flows":[92],"then":[94,160],"combine":[95],"with":[96,213],"some":[97,214],"classification":[98],"clustering":[100],"methods":[101],"look":[103],"for":[104,178,270],"signs":[105],"attacks.":[108],"In":[109,129],"particular,":[110],"recent":[111],"often":[113],"algorithms":[117],"spot":[119],"present":[121],"based":[125,135,275],"on":[126,136,252,276],"flow.":[128],"this":[130],"paper,":[131],"new":[133,206,268],"method":[134],"detect":[140,257],"using":[143,192],"flow":[145,253],"proposed.":[147],"Accordingly,":[148],"our":[150],"research,":[151],"analyzed":[155],"IP-based":[157],"flows,":[159],"IP":[162],"information":[163],"reconstructed":[165],"from":[166,183],"flow,":[167],"finally":[169],"models":[172],"used":[174],"extract":[176],"features":[177],"IPs":[182],"other":[184],"IPs.":[185],"Additionally,":[186],"combined":[188],"model":[191,208,235],"Bidirectional":[193],"Long":[194],"Short-Term":[195],"Memory":[196],"(BiLSTM)":[197],"Graph":[199],"Convolutional":[200],"Networks":[201],"(GCN)":[202],"introduced.":[204],"The":[205],"evaluated":[210],"compared":[212],"traditional":[215],"models,":[218,226],"i.e.":[219],"Multi-layer":[220],"perceptron":[221],"(MLP)":[222],"single":[224],"GCN":[225],"experiments.":[229],"Experimental":[230],"results":[231],"show":[232],"that":[233,248],"BiLSTM-GCN":[234],"has":[236],"best":[238],"performance":[239],"all":[241],"evaluation":[242],"scores.":[243],"not":[245],"only":[246],"shows":[247],"application":[251],"analysis":[255],"good":[262],"decision":[263],"but":[264],"also":[265],"suggests":[266],"direction":[269],"intrusion":[272],"techniques":[274],"learning.":[278]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":2}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}