{"id":"https://openalex.org/W7133190879","doi":"https://doi.org/10.3390/info17030245","title":"APT-LMSPS: An Efficient APT Detection System via Long-Range Meta-Path Progressive Sampling Search","display_name":"APT-LMSPS: An Efficient APT Detection System via Long-Range Meta-Path Progressive Sampling Search","publication_year":2026,"publication_date":"2026-03-02","ids":{"openalex":"https://openalex.org/W7133190879","doi":"https://doi.org/10.3390/info17030245"},"language":"en","primary_location":{"id":"doi:10.3390/info17030245","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030245","pdf_url":"https://www.mdpi.com/2078-2489/17/3/245/pdf?version=1772446065","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/17/3/245/pdf?version=1772446065","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127837409","display_name":"Jizhao Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jizhao Liu","raw_affiliation_strings":["College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127784204","display_name":"Zitao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zitao Zhang","raw_affiliation_strings":["College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127789110","display_name":"Shuqin Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuqin Zhang","raw_affiliation_strings":["College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052988926","display_name":"Fangfang Shan","orcid":"https://orcid.org/0000-0001-5586-6715"},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fangfang Shan","raw_affiliation_strings":["College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100775347","display_name":"Jie Li","orcid":"https://orcid.org/0000-0002-4366-7724"},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Li","raw_affiliation_strings":["College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Artificial Intelligence, Zhongyuan University of Technology, Zhengzhou 451191, China","institution_ids":["https://openalex.org/I132586189"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I132586189"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.19465116,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"17","issue":"3","first_page":"245","last_page":"245"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5494999885559082,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5494999885559082,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.08349999785423279,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.05389999970793724,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4952000081539154},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.48919999599456787},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.45590001344680786},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.41190001368522644},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.40560001134872437},{"id":"https://openalex.org/keywords/combinatorial-explosion","display_name":"Combinatorial explosion","score":0.3765999972820282},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.36160001158714294},{"id":"https://openalex.org/keywords/sampling","display_name":"Sampling (signal processing)","score":0.34040001034736633}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8346999883651733},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5299000144004822},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4952000081539154},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.48919999599456787},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4359999895095825},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.41190001368522644},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.40560001134872437},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3853999972343445},{"id":"https://openalex.org/C115908005","wikidata":"https://www.wikidata.org/wiki/Q2668364","display_name":"Combinatorial explosion","level":2,"score":0.3765999972820282},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.36160001158714294},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.34040001034736633},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.3253999948501587},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3221000134944916},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C116409475","wikidata":"https://www.wikidata.org/wiki/Q1385056","display_name":"External Data Representation","level":2,"score":0.29919999837875366},{"id":"https://openalex.org/C179799912","wikidata":"https://www.wikidata.org/wiki/Q205084","display_name":"Computational complexity theory","level":2,"score":0.2921999990940094},{"id":"https://openalex.org/C202708506","wikidata":"https://www.wikidata.org/wiki/Q7449050","display_name":"Semantic compression","level":5,"score":0.28769999742507935},{"id":"https://openalex.org/C130318100","wikidata":"https://www.wikidata.org/wiki/Q2268914","display_name":"Semantic similarity","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28610000014305115},{"id":"https://openalex.org/C166423231","wikidata":"https://www.wikidata.org/wiki/Q1891170","display_name":"Semantic search","level":3,"score":0.28189998865127563},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C193125573","wikidata":"https://www.wikidata.org/wiki/Q7449065","display_name":"Semantic interpretation","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2581000030040741},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/info17030245","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030245","pdf_url":"https://www.mdpi.com/2078-2489/17/3/245/pdf?version=1772446065","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bb25ecd1e1b047138b81cef51a243380","is_oa":true,"landing_page_url":"https://doaj.org/article/bb25ecd1e1b047138b81cef51a243380","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 17, Iss 3, p 245 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/info17030245","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030245","pdf_url":"https://www.mdpi.com/2078-2489/17/3/245/pdf?version=1772446065","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.637621283531189}],"awards":[{"id":"https://openalex.org/G2302847181","display_name":null,"funder_award_id":"GG202417","funder_id":"https://openalex.org/F4320329543","funder_display_name":"Zhongyuan University of Technology"}],"funders":[{"id":"https://openalex.org/F4320329543","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7133190879.pdf","grobid_xml":"https://content.openalex.org/works/W7133190879.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W2284900416","https://openalex.org/W2997404190","https://openalex.org/W2998038410","https://openalex.org/W3211430557","https://openalex.org/W4226139354","https://openalex.org/W4281617842","https://openalex.org/W4294238081","https://openalex.org/W4311703141","https://openalex.org/W4312362177","https://openalex.org/W4312948208","https://openalex.org/W4328028676","https://openalex.org/W4391235307","https://openalex.org/W4392182086","https://openalex.org/W4392357737","https://openalex.org/W4395085347","https://openalex.org/W4396574997","https://openalex.org/W4400976357","https://openalex.org/W4401004521","https://openalex.org/W4401864884","https://openalex.org/W4402264131","https://openalex.org/W4402265033","https://openalex.org/W4402288718","https://openalex.org/W4402673967","https://openalex.org/W4403462759","https://openalex.org/W4404278858","https://openalex.org/W4404813494","https://openalex.org/W4405236144","https://openalex.org/W4407264055","https://openalex.org/W4408353041","https://openalex.org/W4416549596"],"related_works":[],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threats":[2],"(APTs)":[3],"are":[4],"characterized":[5],"by":[6,127,192],"stealth,":[7],"infrequency,":[8],"and":[9,72,101,163,177,187],"long":[10],"cycles,":[11],"evading":[12],"traditional":[13],"security":[14],"to":[15,105,156],"endanger":[16],"critical":[17,143],"infrastructure.":[18],"Complex":[19],"semantic":[20,67,102,130,145],"links":[21],"between":[22],"system":[23,87],"entities":[24],"can":[25],"be":[26],"accurately":[27,113],"modeled":[28],"using":[29],"representation":[30],"learning":[31],"techniques":[32],"based":[33],"on":[34,174],"heterogeneous":[35],"provenance":[36],"graphs,":[37],"providing":[38],"a":[39,85,153],"novel":[40],"method":[41],"for":[42,76],"uncovering":[43],"hidden":[44],"APT":[45,168],"attack":[46],"chains.":[47],"However,":[48],"in":[49,170],"large-scale":[50,171],"practical":[51],"implementations,":[52],"this":[53],"approach":[54,123,155],"still":[55],"faces":[56],"three":[57],"major":[58],"challenges:":[59],"combinatorial":[60],"explosion":[61,109],"of":[62,66,142,195],"long-range":[63,115,189],"meta-paths,":[64],"loss":[65],"evolution":[68],"during":[69],"graph":[70],"compression,":[71],"high":[73],"computational":[74],"overhead":[75],"dynamic":[77,99],"environments.":[78],"To":[79],"address":[80],"these,":[81],"we":[82],"propose":[83],"APT-LMSPS,":[84],"detection":[86,169],"leveraging":[88],"Long-Range":[89],"Meta-path":[90],"Progressive":[91],"Sampling":[92],"Search":[93],"(LMSPS).":[94],"The":[95],"LMSPS":[96],"algorithm":[97],"uses":[98,152],"pruning":[100],"contribution":[103],"assessment":[104],"convert":[106],"meta-path":[107,149],"combination":[108],"into":[110],"constant-scale":[111],"computation,":[112],"modeling":[114],"dependencies.":[116],"Second,":[117],"the":[118,148],"Maintaining":[119],"Global":[120],"Semantics":[121],"(MGS)":[122],"intelligently":[124],"filters":[125],"events":[126],"tracking":[128],"node":[129],"state":[131],"changes,":[132],"achieving":[133],"an":[134,193],"8:1":[135],"compression":[136],"ratio":[137],"while":[138],"preserving":[139],"over":[140,197],"90%":[141],"pathways\u2019":[144],"integrity.":[146],"Lastly,":[147],"encoding":[150,161],"database":[151],"caching":[154],"avoid":[157],"repeated":[158],"encoding,":[159],"doubling":[160],"effectiveness":[162],"enabling":[164],"efficient,":[165],"accurate,":[166],"system-wide":[167],"scenarios.":[172],"Evaluated":[173],"DARPA,":[175],"StreamSpot,":[176],"ATLAS":[178],"datasets,":[179],"APT-LMSPS":[180],"maintains":[181],"competitive":[182],"accuracy":[183],"(F1-score":[184],"\u2265":[185],"0.98)":[186],"improves":[188],"processing":[190],"efficiency":[191],"order":[194],"magnitude":[196],"baselines.":[198]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-03-03T00:00:00"}