{"id":"https://openalex.org/W4310044600","doi":"https://doi.org/10.3233/jifs-221055","title":"A new framework for APT attack detection based on network traffic","display_name":"A new framework for APT attack detection based on network traffic","publication_year":2022,"publication_date":"2022-11-25","ids":{"openalex":"https://openalex.org/W4310044600","doi":"https://doi.org/10.3233/jifs-221055"},"language":"en","primary_location":{"id":"doi:10.3233/jifs-221055","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-221055","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049138691","display_name":"Hoa Cuong Nguyen","orcid":null},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]},{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["CN","VN"],"is_corresponding":false,"raw_author_name":"Hoa Cuong Nguyen","raw_affiliation_strings":["Faculty of Information Science And Engineering, Yunnan University, China","Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Science And Engineering, Yunnan University, China","institution_ids":["https://openalex.org/I189210763"]},{"raw_affiliation_string":"Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]},{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070501985","display_name":"Cho Do Xuan","orcid":"https://orcid.org/0000-0002-6334-1262"},"institutions":[{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Cho Do Xuan","raw_affiliation_strings":["Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059532776","display_name":"Long Th\u00e0nh Nguy\u1ec5n","orcid":"https://orcid.org/0000-0002-0061-9941"},"institutions":[{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Long Thanh Nguyen","raw_affiliation_strings":["Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101742692","display_name":"Hoa D. Nguyen","orcid":"https://orcid.org/0000-0003-2177-3478"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]},{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["CN","VN"],"is_corresponding":false,"raw_author_name":"Hoa Dinh Nguyen","raw_affiliation_strings":["Faculty of Information Science And Engineering, Yunnan University, China","Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Science And Engineering, Yunnan University, China","institution_ids":["https://openalex.org/I189210763"]},{"raw_affiliation_string":"Faculty of Information Security, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]},{"raw_affiliation_string":"Faculty of Information Technology, Posts and Telecommunications Institute of Technology Hanoi, Vietnam","institution_ids":["https://openalex.org/I4400600977"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5070501985"],"corresponding_institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"],"apc_list":null,"apc_paid":null,"fwci":1.9272,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.8588448,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"44","issue":"3","first_page":"3459","last_page":"3474"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.794111430644989},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5671855211257935},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5323035717010498},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.4133821129798889},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.386919766664505}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.794111430644989},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5671855211257935},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5323035717010498},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.4133821129798889},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.386919766664505},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jifs-221055","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-221055","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1498268535","https://openalex.org/W1992705187","https://openalex.org/W2028501442","https://openalex.org/W2295797531","https://openalex.org/W2332066482","https://openalex.org/W2408793237","https://openalex.org/W2748696935","https://openalex.org/W2808323833","https://openalex.org/W2818789173","https://openalex.org/W2883847230","https://openalex.org/W2910711617","https://openalex.org/W2913909795","https://openalex.org/W2920971804","https://openalex.org/W2921573932","https://openalex.org/W2939867067","https://openalex.org/W2955881216","https://openalex.org/W2982640876","https://openalex.org/W2984419450","https://openalex.org/W3002573977","https://openalex.org/W3003861670","https://openalex.org/W3033897840","https://openalex.org/W3033923469","https://openalex.org/W3040320120","https://openalex.org/W3047150775","https://openalex.org/W3082065751","https://openalex.org/W3083012366","https://openalex.org/W3083528243","https://openalex.org/W3130970113","https://openalex.org/W3133157666","https://openalex.org/W3136488577","https://openalex.org/W3136638767","https://openalex.org/W3152893301","https://openalex.org/W3153029966","https://openalex.org/W3156442476","https://openalex.org/W3157836276","https://openalex.org/W4224242615"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2347219288","https://openalex.org/W2366221835","https://openalex.org/W2120643732","https://openalex.org/W204974655","https://openalex.org/W2214421097","https://openalex.org/W2826149542","https://openalex.org/W2740420885","https://openalex.org/W2163489736","https://openalex.org/W2183287460"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"attack":[4,34,188,217],"detection":[5,138],"and":[6,25,52,78,104,121,150,155,160,179,183,201,208,232],"monitoring":[7],"has":[8,151],"attracted":[9],"a":[10,31],"lot":[11],"of":[12,18,40,76,81,162,168,203,215],"attention":[13],"recently":[14],"when":[15],"this":[16,29,68,145,163],"type":[17],"cyber-attacks":[19],"is":[20,37,57,62,73,95,117,148,165,227],"growing":[21],"in":[22,74,88,174,229,248],"both":[23,230],"number":[24],"dangerous":[26],"levels.":[27],"In":[28,67,194],"paper,":[30],"new":[32,60],"APT":[33,136,187,204,216,246],"model,":[35,69,196],"which":[36,210],"the":[38,70,82,92,110,114,127,166,181,184,213,224,235,241],"combination":[39,167],"three":[41],"different":[42,170],"neural":[43],"network":[44,87,142,249],"layers":[45],"including:":[46],"Multi-layer":[47],"Perceptron":[48],"(MLP),":[49],"Inference":[50,93],"(I),":[51],"Graph":[53],"Convolutional":[54],"Networks":[55],"(GCN)":[56],"proposed.":[58],"The":[59,135,158,219],"model":[61,147,237],"named":[63],"MIG":[64,146,195,236],"for":[65,97,119],"short.":[66],"MLP":[71],"layer":[72,94,116],"charge":[75],"aggregating":[77],"extracting":[79],"properties":[80,200],"IPs":[83],"based":[84,125,140,190],"on":[85,126,141,191],"flow":[86,106],"Network":[89,192],"traffic,":[90],"while":[91],"responsible":[96],"building":[98],"IP":[99,123,132],"information":[100,133],"profiles":[101],"by":[102],"grouping":[103],"concatenating":[105],"networks":[107],"generated":[108],"from":[109,131],"same":[111],"IP.":[112],"Finally,":[113],"GCN":[115],"used":[118],"analyzing":[120],"reconstructing":[122],"features":[124],"behavior":[128],"extraction":[129],"process":[130],"records.":[134],"attacks":[137,205,247],"method":[139,164,226],"traffic":[143,250],"using":[144],"new,":[149],"yet":[152],"been":[153],"proposed":[154,225],"applied":[156],"anywhere.":[157],"novelty":[159],"uniqueness":[161],"many":[169,197],"data":[171],"mining":[172],"techniques":[173],"order":[175],"to":[176,243],"calculate,":[177],"extract":[178],"represent":[180],"relationship":[182],"correlation":[185],"between":[186],"behaviors":[189,202],"traffic.":[193],"meaningful":[198,228],"anomalous":[199],"are":[206],"synthesized":[207],"extracted,":[209],"help":[211],"improve":[212],"performance":[214],"detection.":[218],"experimental":[220],"results":[221],"showed":[222],"that":[223],"theory":[231],"practice":[233],"since":[234],"not":[238],"only":[239],"improves":[240],"ability":[242],"correctly":[244],"detect":[245],"but":[251],"also":[252],"minimizes":[253],"false":[254],"alarms.":[255]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2}],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2025-10-10T00:00:00"}