{"id":"https://openalex.org/W7163197184","doi":"https://doi.org/10.3837/tiis.2026.05.011","title":"Multi-Layer Collaborative Continuous Defense in PDNs Driven by an LLM-Interactive Endpoint Trusted Intelligence Agent","display_name":"Multi-Layer Collaborative Continuous Defense in PDNs Driven by an LLM-Interactive Endpoint Trusted Intelligence Agent","publication_year":2026,"publication_date":"2026-05-31","ids":{"openalex":"https://openalex.org/W7163197184","doi":"https://doi.org/10.3837/tiis.2026.05.011"},"language":null,"primary_location":{"id":"doi:10.3837/tiis.2026.05.011","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.05.011","pdf_url":"https://itiis.org/digital-library/manuscript/file/107365/TIIS Vol 20, No 5-11.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://itiis.org/digital-library/manuscript/file/107365/TIIS Vol 20, No 5-11.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137639931","display_name":"Siwei Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siwei Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137702409","display_name":"Zheng Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheng Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136426426","display_name":"Yue Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yue Jiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031190010","display_name":"Kewen Wang","orcid":"https://orcid.org/0000-0002-0542-3761"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kewen Wang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137704193","display_name":"Yan Liu","orcid":"https://orcid.org/0000-0002-2523-997X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5001378599","display_name":"Sujie Shao","orcid":"https://orcid.org/0000-0003-3945-0706"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sujie Shao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.73100316,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":"5","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.16680000722408295,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.16680000722408295,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.16369999945163727,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.04500000178813934,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4146000146865845},{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.4097999930381775},{"id":"https://openalex.org/keywords/business-intelligence","display_name":"Business intelligence","score":0.34439998865127563},{"id":"https://openalex.org/keywords/multi-agent-system","display_name":"Multi-agent system","score":0.3334999978542328},{"id":"https://openalex.org/keywords/trusted-computing","display_name":"Trusted Computing","score":0.3111000061035156},{"id":"https://openalex.org/keywords/collaborative-software","display_name":"Collaborative software","score":0.27480000257492065}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8510000109672546},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5532000064849854},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4146000146865845},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.4097999930381775},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.36559998989105225},{"id":"https://openalex.org/C2767350","wikidata":"https://www.wikidata.org/wiki/Q6662173","display_name":"Business intelligence","level":2,"score":0.34439998865127563},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.3334999978542328},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.32679998874664307},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C554579003","wikidata":"https://www.wikidata.org/wiki/Q474157","display_name":"Collaborative software","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C206149592","wikidata":"https://www.wikidata.org/wiki/Q3999882","display_name":"Trusted Network Connect","level":3,"score":0.2567000091075897},{"id":"https://openalex.org/C74072328","wikidata":"https://www.wikidata.org/wiki/Q1142726","display_name":"Intelligent agent","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3837/tiis.2026.05.011","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.05.011","pdf_url":"https://itiis.org/digital-library/manuscript/file/107365/TIIS Vol 20, No 5-11.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3837/tiis.2026.05.011","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.05.011","pdf_url":"https://itiis.org/digital-library/manuscript/file/107365/TIIS Vol 20, No 5-11.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7163197184.pdf","grobid_xml":"https://content.openalex.org/works/W7163197184.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Power":[0],"Distribution":[1],"Networks":[2],"(PDNs)":[3],"face":[4],"increasingly":[5],"stealthy":[6],"and":[7,33,74,112,129,154,160],"causally":[8],"complex":[9],"cyber":[10],"threats":[11],"that":[12,135,146],"challenge":[13],"traditional":[14],"detection":[15],"approaches.While":[16],"Large":[17],"Language":[18],"Models":[19],"(LLMs)":[20],"offer":[21],"promising":[22],"capabilities":[23],"to":[24,37,70,96,114],"reason":[25],"about":[26],"such":[27],"threats,":[28],"directly":[29],"feeding":[30],"fragmented,":[31],"noisy,":[32],"heterogeneous":[34,84],"machine":[35],"logs":[36,85],"them":[38],"often":[39],"overwhelms":[40],"their":[41],"reasoning":[42,156],"capabilities,":[43],"obscuring":[44],"critical":[45],"causal":[46,99],"chains.This":[47],"paper":[48],"presents":[49],"MCCD,":[50],"a":[51,68,115],"Multi-Layer":[52],"Collaborative":[53],"Continuous":[54],"Defense":[55],"framework":[56],"driven":[57],"by":[58],"an":[59,101,158],"LLM-interactive":[60],"Trusted":[61,148],"Intelligence":[62,90],"Agent":[63],"(TIA).The":[64],"TIA":[65],"operates":[66],"inside":[67],"TEE":[69],"ensure":[71],"the":[72,93,105,109],"authenticity":[73],"provenance":[75],"of":[76],"endpoint":[77],"intelligence.A":[78],"lightweight":[79],"Temporal-Causal-Hierarchical":[80],"Encoding":[81],"(TCHE)":[82],"transforms":[83],"into":[86],"structured":[87],"Semantic":[88],"Security":[89],"(SSI),":[91],"enabling":[92],"cloudbased":[94],"LLM":[95,106],"perform":[97],"coherent":[98],"reasoning.Through":[100],"adaptive":[102],"closed-loop":[103],"mechanism,":[104],"iteratively":[107],"refines":[108],"collected":[110],"evidence":[111],"converges":[113],"reliable":[116],"final":[117],"threat":[118,165],"determination,":[119],"rather":[120],"than":[121],"relying":[122],"on":[123,126],"one-shot":[124],"inference.Evaluations":[125],"PDN-style":[127],"datasets":[128],"DARPA":[130],"Transparent":[131],"Computing":[132],"traces":[133],"demonstrate":[134,145],"MCCD":[136],"provides":[137,157],"substantial":[138],"gains":[139],"in":[140,167],"industrial":[141],"power-system":[142],"scenarios.These":[143],"results":[144],"combining":[147],"Execution":[149],"Environment":[150],"(TEE),":[151],"semantic":[152],"intelligence,":[153],"iterative":[155],"effective":[159],"practical":[161],"path":[162],"toward":[163],"robust":[164],"determination":[166],"modern":[168],"PDNs.":[169]},"counts_by_year":[],"updated_date":"2026-06-04T06:14:18.571774","created_date":"2026-06-03T00:00:00"}
