{"id":"https://openalex.org/W4411805841","doi":"https://doi.org/10.3390/sym17071026","title":"Symmetric Dual-Phase Framework for APT Attack Detection Based on Multi-Feature-Conditioned GAN and Graph Convolutional Network","display_name":"Symmetric Dual-Phase Framework for APT Attack Detection Based on Multi-Feature-Conditioned GAN and Graph Convolutional Network","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4411805841","doi":"https://doi.org/10.3390/sym17071026"},"language":"en","primary_location":{"id":"doi:10.3390/sym17071026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17071026","pdf_url":"https://www.mdpi.com/2073-8994/17/7/1026/pdf?version=1751281867","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-8994/17/7/1026/pdf?version=1751281867","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103098827","display_name":"Qi Liu","orcid":"https://orcid.org/0000-0002-8536-4932"},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Liu","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101735663","display_name":"Yao Dong","orcid":"https://orcid.org/0000-0001-6925-4955"},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Dong","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062598349","display_name":"Zheng Chao","orcid":"https://orcid.org/0000-0001-5912-1446"},"institutions":[{"id":"https://openalex.org/I4210117317","display_name":"Tianjin Open University","ror":"https://ror.org/02d19m529","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210117317"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Zheng","raw_affiliation_strings":["Smart Education Research and Development Center, Open University, Tianjin 300191, China"],"affiliations":[{"raw_affiliation_string":"Smart Education Research and Development Center, Open University, Tianjin 300191, China","institution_ids":["https://openalex.org/I4210117317"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072797540","display_name":"Hualin Dai","orcid":null},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Hualin Dai","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100717652","display_name":"Jiaxing Wang","orcid":"https://orcid.org/0000-0002-6061-3445"},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxing Wang","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109653115","display_name":"Liyuan Ning","orcid":null},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liyuan Ning","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056581525","display_name":"Qiqi Liang","orcid":"https://orcid.org/0000-0001-6983-5733"},"institutions":[{"id":"https://openalex.org/I168673124","display_name":"Tianjin Chengjian University","ror":"https://ror.org/01d0bkz51","country_code":"CN","type":"education","lineage":["https://openalex.org/I168673124"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiqi Liang","raw_affiliation_strings":["School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Information Engineering, Tianjin Chengjian University, Tianjin 300384, China","institution_ids":["https://openalex.org/I168673124"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5072797540"],"corresponding_institution_ids":["https://openalex.org/I168673124"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":1.6405,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85766392,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"17","issue":"7","first_page":"1026","last_page":"1026"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6380898952484131},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5397146344184875},{"id":"https://openalex.org/keywords/dual","display_name":"Dual (grammatical number)","score":0.4753422737121582},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.41151660680770874},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3034902513027191},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.26406949758529663}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6380898952484131},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5397146344184875},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.4753422737121582},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.41151660680770874},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3034902513027191},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26406949758529663},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C124952713","wikidata":"https://www.wikidata.org/wiki/Q8242","display_name":"Literature","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/sym17071026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17071026","pdf_url":"https://www.mdpi.com/2073-8994/17/7/1026/pdf?version=1751281867","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/sym17071026","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17071026","pdf_url":"https://www.mdpi.com/2073-8994/17/7/1026/pdf?version=1751281867","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5166750288","display_name":null,"funder_award_id":"23YDTPJC00350","funder_id":"https://openalex.org/F4320336756","funder_display_name":"Tianjin Science and Technology Program"}],"funders":[{"id":"https://openalex.org/F4320336756","display_name":"Tianjin Science and Technology Program","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411805841.pdf","grobid_xml":"https://content.openalex.org/works/W4411805841.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W2756182389","https://openalex.org/W2775103799","https://openalex.org/W2789828921","https://openalex.org/W2798790152","https://openalex.org/W2889836475","https://openalex.org/W2910711617","https://openalex.org/W2979389376","https://openalex.org/W2979563069","https://openalex.org/W2982853004","https://openalex.org/W2986055611","https://openalex.org/W3025255083","https://openalex.org/W3040320120","https://openalex.org/W3047231515","https://openalex.org/W3082065751","https://openalex.org/W3155962425","https://openalex.org/W3200273708","https://openalex.org/W4205611519","https://openalex.org/W4226407869","https://openalex.org/W4292823796","https://openalex.org/W4292974997","https://openalex.org/W4295788744","https://openalex.org/W4300543864","https://openalex.org/W4307944984","https://openalex.org/W4310044600","https://openalex.org/W4320013936","https://openalex.org/W4372342980","https://openalex.org/W4376480418","https://openalex.org/W4377091294","https://openalex.org/W4388835106","https://openalex.org/W4388948449","https://openalex.org/W4399939664","https://openalex.org/W4401273046","https://openalex.org/W4402921505","https://openalex.org/W4406946743","https://openalex.org/W4408169200","https://openalex.org/W4408999426","https://openalex.org/W4410325933","https://openalex.org/W6811367409","https://openalex.org/W6847144147"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Advanced":[0],"persistent":[1],"threat":[2],"(APT)":[3],"attacks":[4],"present":[5],"significant":[6,123],"challenges":[7],"to":[8,11,19,43,90,105,145,178],"cybersecurity":[9],"due":[10],"their":[12],"covert":[13],"nature,":[14],"high":[15,164],"complexity,":[16],"and":[17,24,40,69,73,102,139,158,167,182],"ability":[18,177],"operate":[20],"across":[21],"multiple":[22],"temporal":[23],"spatial":[25],"scales.":[26],"Existing":[27],"detection":[28],"techniques":[29],"often":[30],"struggle":[31],"with":[32,135],"issues":[33],"like":[34],"class":[35,93,180],"imbalance,":[36],"insufficient":[37],"feature":[38,100],"extraction,":[39],"the":[41,92,108,119,173],"inability":[42],"capture":[44,183],"complex":[45,184],"attack":[46,82,185],"dependencies.":[47],"To":[48],"address":[49],"these":[50],"limitations,":[51],"we":[52],"propose":[53],"a":[54,70,190],"dual-phase":[55],"framework":[56,121],"for":[57,66,80,193],"APT":[58,194],"detection,":[59],"combining":[60],"multi-feature-conditioned":[61],"generative":[62],"adversarial":[63],"networks":[64],"(MF-CGANs)":[65],"data":[67],"reconstruction":[68],"multi-scale":[71],"convolution":[72,104],"channel":[74],"attention-enhanced":[75],"graph":[76,103],"convolutional":[77],"network":[78,112],"(MC-GCN)":[79],"improved":[81],"detection.":[83,195],"The":[84,147],"MF-CGAN":[85],"model":[86,107,149],"generates":[87],"minority-class":[88],"samples":[89],"resolve":[91],"imbalance":[94,181],"problem,":[95],"while":[96,161],"MC-GCN":[97,129,148],"leverages":[98],"advanced":[99],"extraction":[101],"better":[106],"intricate":[109],"relationships":[110],"within":[111],"traffic":[113],"data.":[114],"Experimental":[115],"results":[116,171],"show":[117],"that":[118],"proposed":[120,174],"achieves":[122,150],"improvements":[124,141],"over":[125],"baseline":[126],"models.":[127],"Specifically,":[128],"outperforms":[130],"traditional":[131],"CNN-based":[132],"IDS":[133],"models,":[134],"accuracy,":[136],"precision,":[137],"recall,":[138],"F1-score":[140],"ranging":[142],"from":[143],"0.47%":[144],"13.41%.":[146],"an":[151],"accuracy":[152],"of":[153],"99.87%,":[154],"surpassing":[155],"CNN":[156],"(86.46%)":[157],"GCN":[159],"(99.24%),":[160],"also":[162],"exhibiting":[163],"precision":[165],"(99.87%)":[166],"recall":[168],"(99.88%).":[169],"These":[170],"highlight":[172],"model\u2019s":[175],"superior":[176],"handle":[179],"behaviors,":[186],"establishing":[187],"it":[188],"as":[189],"leading":[191],"approach":[192]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}