{"id":"https://openalex.org/W4306160043","doi":"https://doi.org/10.3390/sym14102138","title":"DualAC2NN: Revisiting and Alleviating Alert Fatigue from the Detection Perspective","display_name":"DualAC2NN: Revisiting and Alleviating Alert Fatigue from the Detection Perspective","publication_year":2022,"publication_date":"2022-10-13","ids":{"openalex":"https://openalex.org/W4306160043","doi":"https://doi.org/10.3390/sym14102138"},"language":"en","primary_location":{"id":"doi:10.3390/sym14102138","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14102138","pdf_url":"https://www.mdpi.com/2073-8994/14/10/2138/pdf?version=1666768818","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-8994/14/10/2138/pdf?version=1666768818","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063124648","display_name":"Gang Yang","orcid":"https://orcid.org/0000-0001-7063-9182"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Gang Yang","raw_affiliation_strings":["College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China"],"raw_orcid":"https://orcid.org/0000-0001-7063-9182","affiliations":[{"raw_affiliation_string":"College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101867084","display_name":"Chaojing Tang","orcid":"https://orcid.org/0000-0002-9025-2791"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaojing Tang","raw_affiliation_strings":["College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103164660","display_name":"Xingtong Liu","orcid":"https://orcid.org/0009-0002-7954-941X"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingtong Liu","raw_affiliation_strings":["College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Electronic Science and Technology, National University of Defense Technology, Changsha 410073, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5063124648"],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2227},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2227},"fwci":0.9061,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.74072643,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"14","issue":"10","first_page":"2138","last_page":"2138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8493475914001465},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.7229604721069336},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.44167065620422363},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.42818203568458557},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4195009469985962},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4065384566783905},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36880630254745483},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32421180605888367}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8493475914001465},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7229604721069336},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.44167065620422363},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42818203568458557},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4195009469985962},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4065384566783905},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36880630254745483},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32421180605888367}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/sym14102138","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14102138","pdf_url":"https://www.mdpi.com/2073-8994/14/10/2138/pdf?version=1666768818","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:facec535a9bd4464a8b3439d4984453e","is_oa":true,"landing_page_url":"https://doaj.org/article/facec535a9bd4464a8b3439d4984453e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry, Vol 14, Iss 10, p 2138 (2022)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2073-8994/14/10/2138/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/sym14102138","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/sym14102138","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14102138","pdf_url":"https://www.mdpi.com/2073-8994/14/10/2138/pdf?version=1666768818","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5899999737739563,"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4306160043.pdf"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1969545431","https://openalex.org/W2027887391","https://openalex.org/W2110890874","https://openalex.org/W2121035740","https://openalex.org/W2122782595","https://openalex.org/W2206373005","https://openalex.org/W2250539671","https://openalex.org/W2465978385","https://openalex.org/W2501244995","https://openalex.org/W2510001427","https://openalex.org/W2783748519","https://openalex.org/W2793038341","https://openalex.org/W2807024897","https://openalex.org/W2808647806","https://openalex.org/W2895547478","https://openalex.org/W2947745012","https://openalex.org/W2963053388","https://openalex.org/W2965568183","https://openalex.org/W2971076825","https://openalex.org/W3013443908","https://openalex.org/W3087997766","https://openalex.org/W3088766396","https://openalex.org/W3092771185","https://openalex.org/W3105939760","https://openalex.org/W3121486149","https://openalex.org/W3126165507","https://openalex.org/W3130490915","https://openalex.org/W3133124259","https://openalex.org/W3170052928","https://openalex.org/W3200594578","https://openalex.org/W4282573646","https://openalex.org/W4288057803","https://openalex.org/W4297846671"],"related_works":["https://openalex.org/W1557094818","https://openalex.org/W2183246718","https://openalex.org/W2099261052","https://openalex.org/W3209204065","https://openalex.org/W1755711892","https://openalex.org/W2160907113","https://openalex.org/W2364419519","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146"],"abstract_inverted_index":{"The":[0,23,71],"exponential":[1],"expansion":[2],"of":[3,20,26,58,64,74,88,95,124,132,159,165,174],"Internet":[4],"interconnectivity":[5],"has":[6],"led":[7],"to":[8,36,60,78,83,91,100,112,127,151,189,232],"a":[9,17,80,138,147,181,213,233,244,250],"dramatic":[10],"increase":[11],"in":[12],"cyber-attack":[13],"alerts,":[14],"which":[15,168,254],"contain":[16],"considerable":[18],"proportion":[19],"false":[21,27,65,114],"positives.":[22],"overwhelming":[24],"number":[25],"positives":[28],"cause":[29,101],"tremendous":[30],"resource":[31],"consumption":[32],"and":[33,104,207,228,237,249],"delay":[34],"responses":[35],"the":[37,47,56,62,68,85,93,106,109,122,129,157,171,175,191,196,202,218,265],"really":[38],"severe":[39],"incidents,":[40],"namely,":[41],"alert":[42,50,197,262],"fatigue.":[43],"To":[44,116],"cope":[45],"with":[46,242],"challenge":[48],"from":[49,67,264],"fatigue,":[51],"we":[52,119,145,179],"focus":[53],"on":[54,212],"enhancing":[55],"capability":[57],"detectors":[59],"reduce":[61,113],"generation":[63],"alerts":[66,224],"detection":[69,110,245,266],"perspective.":[70,267],"core":[72],"idea":[73],"our":[75,257],"work":[76],"is":[77],"train":[79],"machine-learning-based":[81],"detector":[82],"grasp":[84],"empirical":[86],"intelligence":[87],"security":[89],"analysts":[90],"estimate":[92],"feasibility":[94,126,193],"an":[96,133,153],"incoming":[97],"HTTP":[98,135,154],"request":[99,136,155],"substantial":[102],"threats,":[103],"integrate":[105,190],"estimation":[107,194],"into":[108,156,195],"stage":[111],"alarms.":[115],"this":[117],"end,":[118],"innovatively":[120],"introduce":[121],"concept":[123],"attack":[125,140,192],"characterize":[128],"composition":[130],"rationality":[131],"inbound":[134],"as":[137],"feasible":[139],"under":[141],"static":[142],"scrutinization.":[143],"First,":[144],"adopt":[146],"fast":[148],"request-reorganization":[149],"algorithm":[150],"transform":[152],"form":[158],"interface:payload":[160],"pair":[161],"for":[162],"further":[163],"alignment":[164],"structural":[166],"components":[167],"can":[169,259],"reveal":[170],"processing":[172],"logic":[173],"target":[176],"program.":[177],"Then,":[178],"build":[180],"dual-channel":[182],"attention-based":[183],"circulant":[184],"convolution":[185],"neural":[186],"network":[187],"(DualAC2NN)":[188],"decision,":[198],"by":[199,225],"comprehensively":[200],"considering":[201],"interface":[203],"sensitivity,":[204],"payload":[205],"maliciousness,":[206],"their":[208],"bipartite":[209],"compatibility.":[210],"Experiments":[211],"real-world":[214],"dataset":[215],"show":[216],"that":[217,256],"proposed":[219],"method":[220],"significantly":[221],"reduces":[222],"invalid":[223],"around":[226],"86.37%":[227],"over":[229],"61.64%":[230],"compared":[231],"rule-based":[234],"commercial":[235],"WAF":[236],"several":[238],"state-of-the-art":[239],"methods,":[240],"along":[241],"retaining":[243],"rate":[246],"at":[247],"97.89%":[248],"lower":[251],"time":[252],"overhead,":[253],"indicates":[255],"approach":[258],"effectively":[260],"mitigate":[261],"fatigue":[263]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2022-10-14T00:00:00"}