{"id":"https://openalex.org/W3086625638","doi":"https://doi.org/10.3390/e22091026","title":"Distributed Attack Modeling Approach Based on Process Mining and Graph Segmentation","display_name":"Distributed Attack Modeling Approach Based on Process Mining and Graph Segmentation","publication_year":2020,"publication_date":"2020-09-13","ids":{"openalex":"https://openalex.org/W3086625638","doi":"https://doi.org/10.3390/e22091026","mag":"3086625638","pmid":"https://pubmed.ncbi.nlm.nih.gov/33286795"},"language":"en","primary_location":{"id":"doi:10.3390/e22091026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e22091026","pdf_url":"https://www.mdpi.com/1099-4300/22/9/1026/pdf?version=1600051409","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1099-4300/22/9/1026/pdf?version=1600051409","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100707846","display_name":"Yuzhong Chen","orcid":"https://orcid.org/0000-0001-7408-2684"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuzhong Chen","raw_affiliation_strings":["Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China","Key Laboratory of Spatial Data Mining & Information Sharing, Ministry of Education, Fuzhou 350116, China"],"raw_orcid":"https://orcid.org/0000-0001-7408-2684","affiliations":[{"raw_affiliation_string":"Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"Key Laboratory of Spatial Data Mining & Information Sharing, Ministry of Education, Fuzhou 350116, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100405185","display_name":"Zhenyu Liu","orcid":"https://orcid.org/0000-0003-2463-4553"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Liu","raw_affiliation_strings":["Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100343755","display_name":"Yulin Liu","orcid":"https://orcid.org/0000-0003-1683-0255"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yulin Liu","raw_affiliation_strings":["Key Laboratory of Information Security of Network Systems, Fuzhou University, Fuzhou 350116, China"],"raw_orcid":"https://orcid.org/0000-0003-1683-0255","affiliations":[{"raw_affiliation_string":"Key Laboratory of Information Security of Network Systems, Fuzhou University, Fuzhou 350116, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067332736","display_name":"Chen Dong","orcid":"https://orcid.org/0000-0001-7546-3403"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Chen Dong","raw_affiliation_strings":["Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China","Key Laboratory of Information Security of Network Systems, Fuzhou University, Fuzhou 350116, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Key Laboratory of Network Computing and Intelligent Information Processing, College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350116, China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"Key Laboratory of Information Security of Network Systems, Fuzhou University, Fuzhou 350116, China","institution_ids":["https://openalex.org/I80947539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5067332736"],"corresponding_institution_ids":["https://openalex.org/I80947539"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2227},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2227},"fwci":0.671,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.73623875,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"22","issue":"9","first_page":"1026","last_page":"1026"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8434232473373413},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5035080313682556},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4774894416332245},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.4544518291950226},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4477703869342804},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4354492425918579},{"id":"https://openalex.org/keywords/timing-attack","display_name":"Timing attack","score":0.4280881881713867},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.37180352210998535},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3097267150878906},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.20323887467384338},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.17420414090156555},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.1634141504764557}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8434232473373413},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5035080313682556},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4774894416332245},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.4544518291950226},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4477703869342804},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4354492425918579},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.4280881881713867},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.37180352210998535},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3097267150878906},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.20323887467384338},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.17420414090156555},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.1634141504764557}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/e22091026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e22091026","pdf_url":"https://www.mdpi.com/1099-4300/22/9/1026/pdf?version=1600051409","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},{"id":"pmid:33286795","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/33286795","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:mdpi.com:/1099-4300/22/9/1026/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/e22091026","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy; Volume 22; Issue 9; Pages: 1026","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:7597119","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/7597119","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/e22091026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e22091026","pdf_url":"https://www.mdpi.com/1099-4300/22/9/1026/pdf?version=1600051409","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1016955579","display_name":null,"funder_award_id":"61502104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1321117299","display_name":"\u7fa4\u667a\u611f\u77e5\u8f66\u8054\u7f51\u7684\u9ad8\u6548\u6570\u636e\u878d\u5408\u4e0e\u4ea4\u901a\u6d41\u9884\u6d4b\u7814\u7a76","funder_award_id":"61672159","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3791469392","display_name":null,"funder_award_id":"61502105","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3945903818","display_name":null,"funder_award_id":"1672158, 61672159, 61502104, 61502105","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6217414892","display_name":null,"funder_award_id":"1672158","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W44086155","https://openalex.org/W1497007062","https://openalex.org/W1598385458","https://openalex.org/W1964077785","https://openalex.org/W1967902949","https://openalex.org/W1976695572","https://openalex.org/W1998837416","https://openalex.org/W2046304221","https://openalex.org/W2059451986","https://openalex.org/W2062756237","https://openalex.org/W2073104631","https://openalex.org/W2080613515","https://openalex.org/W2083658929","https://openalex.org/W2086054187","https://openalex.org/W2089004939","https://openalex.org/W2090638693","https://openalex.org/W2093690536","https://openalex.org/W2095153962","https://openalex.org/W2098250644","https://openalex.org/W2099836119","https://openalex.org/W2104447397","https://openalex.org/W2111498598","https://openalex.org/W2113325171","https://openalex.org/W2125965138","https://openalex.org/W2131880356","https://openalex.org/W2134937538","https://openalex.org/W2150683370","https://openalex.org/W2156607688","https://openalex.org/W2161455936","https://openalex.org/W2167985173","https://openalex.org/W2533218643","https://openalex.org/W2596608106","https://openalex.org/W2605732479","https://openalex.org/W2607798086","https://openalex.org/W2738416329","https://openalex.org/W2772704452","https://openalex.org/W2781879078","https://openalex.org/W3099517533","https://openalex.org/W3102822398","https://openalex.org/W3106359669","https://openalex.org/W4230145224","https://openalex.org/W6629677911","https://openalex.org/W6676916398","https://openalex.org/W6729370152","https://openalex.org/W6734837485"],"related_works":["https://openalex.org/W2366221835","https://openalex.org/W2368467620","https://openalex.org/W23839355","https://openalex.org/W2376989623","https://openalex.org/W175948677","https://openalex.org/W4301213209","https://openalex.org/W2402511906","https://openalex.org/W2182073463","https://openalex.org/W2345499969","https://openalex.org/W3023008241"],"abstract_inverted_index":{"Attack":[0,21],"graph":[1,53,122,130,151,162],"modeling":[2,54],"aims":[3],"to":[4,35,44,57,88,125,140,174],"generate":[5,89],"attack":[6,10,30,52,66,77,92,97,129,150,161],"models":[7,22],"by":[8,100],"investigating":[9],"behaviors":[11],"recorded":[12],"in":[13,17,196],"intrusion":[14],"alerts":[15],"raised":[16],"network":[18,25,38],"security":[19,26,45],"devices.":[20],"can":[23],"help":[24],"administrators":[27],"discover":[28],"an":[29],"strategy":[31],"that":[32,186],"intruders":[33],"use":[34],"compromise":[36],"the":[37,48,65,70,74,90,95,101,136,176,179,187],"and":[39,79,158,200],"implement":[40],"a":[41,59,83,121,127,148,159],"timely":[42],"response":[43],"threats.":[46],"However,":[47],"state-of-the-art":[49],"algorithms":[50,189,195],"for":[51,112],"are":[55,106,109],"unable":[56],"obtain":[58],"high-level":[60],"or":[61],"global-oriented":[62],"view":[63],"of":[64,178,198],"strategy.":[67],"To":[68,115],"address":[69],"aforementioned":[71],"issue,":[72],"considering":[73],"similarity":[75],"between":[76],"behavior":[78],"workflow,":[80],"we":[81,119,146,170],"employ":[82],"heuristic":[84,102],"process":[85,103],"mining":[86,104],"algorithm":[87,105,124,153,164],"initial":[91,96],"graph.":[93],"Although":[94],"graphs":[98],"generated":[99],"complete,":[107],"they":[108],"extremely":[110],"complex":[111,128],"manual":[113],"analysis.":[114],"improve":[116],"their":[117],"readability,":[118],"propose":[120,147],"segmentation":[123,163],"split":[126],"into":[131],"multiple":[132],"subgraphs":[133],"while":[134],"preserving":[135],"original":[137],"structure.":[138],"Furthermore,":[139],"handle":[141],"massive":[142],"volume":[143],"alert":[144],"data,":[145],"distributed":[149,160],"generation":[152],"based":[154,165],"on":[155,166],"Hadoop":[156],"MapReduce":[157],"Spark":[167],"GraphX.":[168],"Additionally,":[169],"conduct":[171],"comprehensive":[172],"experiments":[173],"validate":[175],"performance":[177],"proposed":[180,188],"algorithms.":[181],"The":[182],"experimental":[183],"results":[184],"demonstrate":[185],"achieve":[190],"considerable":[191],"improvement":[192],"over":[193],"comparative":[194],"terms":[197],"accuracy":[199],"efficiency.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}