On the public citation graph

Fast Memory-efficient Anomaly Detection in Streaming Heterogeneous Graphs

0 signed · 325 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.

Claim with ORCID

Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.

See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-3-642-04180-8_25openalex-snapshot

Mining Graph Evolution Rules

inferredcites →https://doi.org/10.1007/s10618-014-0365-yopenalex-snapshot

Graph based anomaly detection and description: a survey

inferredcites →https://doi.org/10.1007/s10618-014-0367-9openalex-snapshot

Classy: fast clustering streams of call-graphs

inferredcites →https://doi.org/10.1016/0022-0000(81)90033-7openalex-snapshot

New hash functions and their use in authentication and set equality

inferredcites →https://doi.org/10.1016/0167-8655(83)90033-8openalex-snapshot

Inexact graph matching for structural pattern recognition

inferredcites →https://doi.org/10.1016/0377-0427(87)90125-7openalex-snapshot

Silhouettes: A graphical aid to the interpretation and validation of cluster analysis

inferredcites →https://doi.org/10.1016/b978-0-12-172651-5.x5000-3openalex-snapshot

Probability and Random Processes

inferredcites →https://doi.org/10.1017/cbo9781139058452openalex-snapshot

Mining of Massive Datasets

inferredcites →https://doi.org/10.1093/comjnl/bxt070openalex-snapshot

Strongly Universal String Hashing is Fast

inferredcites →https://doi.org/10.1093/oso/9780198572237.001.0001openalex-snapshot

Probability and Random Processes

inferredcites →https://doi.org/10.1109/5254.850825openalex-snapshot

Graph-based data mining

inferredcites →https://doi.org/10.1109/asonam.2011.12openalex-snapshot

Evolutionary Clustering and Analysis of Bibliographic Networks

inferredcites →https://doi.org/10.1109/icde.2011.5767885openalex-snapshot

Outlier detection in graph streams

inferredcites →https://doi.org/10.1109/icdm.2008.17openalex-snapshot

Isolation Forest

inferredcites →https://doi.org/10.1109/icdmw.2007.35openalex-snapshot

Combining Collective Classification and Link Prediction

inferredcites →https://doi.org/10.1109/sequen.1997.666900openalex-snapshot

On the resemblance and containment of documents

inferredcites →https://doi.org/10.1137/1.9781611972757.26openalex-snapshot

Mining Behavior Graphs for “Backtrace” of Noncrashing Bugs

inferredcites →https://doi.org/10.1137/1.9781611972757.6openalex-snapshot

Online Analysis of Community Evolution in Data Streams

inferredcites →https://doi.org/10.1137/1.9781611972801.42openalex-snapshot

On Clustering Graph Streams

inferredcites →https://doi.org/10.1137/1.9781611972832.16openalex-snapshot

On Graph Stream Clustering with Side Information

inferredcites →https://doi.org/10.1137/1.9781611972832.18openalex-snapshot

D elta C on : A Principled Massive-Graph Similarity Function

inferredcites →https://doi.org/10.1137/1.9781611973440.9openalex-snapshot

Local Learning for Mining Outlier Subgraphs from Network Datasets

inferredcites →https://doi.org/10.1137/1.9781611974010.13openalex-snapshot

Vertex Clustering of Augmented Graph Streams

inferredcites →https://doi.org/10.1137/1.9781611974348.24openalex-snapshot

Scalable Anomaly Ranking of Attributed Neighborhoods

inferredcites →https://doi.org/10.1145/1281192.1281266openalex-snapshot

GraphScope

inferredcites →https://doi.org/10.1145/1835804.1835907openalex-snapshot

On community outliers and their efficient detection in information networks

inferredcites →https://doi.org/10.1145/195058.195422openalex-snapshot

Random sampling in cut, flow, and network design problems

inferredcites →https://doi.org/10.1145/2492517.2492582openalex-snapshot

Network similarity via multiple social theories

inferredcites →https://doi.org/10.1145/2623330.2623682openalex-snapshot

Focused clustering and outlier detection in large attributed graphs

inferredcites →https://doi.org/10.1145/2627692.2627694openalex-snapshot

Graph stream algorithms

inferredcites →https://doi.org/10.1145/276698.276876openalex-snapshot

Approximate nearest neighbors

inferredcites →https://doi.org/10.1145/509907.509965openalex-snapshot

Similarity estimation techniques from rounding algorithms

inferredcites →https://doi.org/10.1145/956750.956831openalex-snapshot

Graph-based anomaly detection

inferredcites →https://doi.org/10.1287/moor.24.2.383openalex-snapshot

Random Sampling in Cut, Flow, and Network Design Problems

inferredcites →https://doi.org/10.14778/1687627.1687725openalex-snapshot

GConnect

inferredcites →https://doi.org/10.48550/arxiv.1304.4657openalex-snapshot

DELTACON: A Principled Massive-Graph Similarity Function

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.2139/ssrn.4844816openalex-extracted

inferred← citeshttps://doi.org/10.1002/9781119675525.ch11openalex-snapshot

The New Abnormal: Network Anomalies in the AI Era

inferred← citeshttps://doi.org/10.1002/9781119723950.ch7openalex-snapshot

Minimax Detection (MAD) for Computer Security: A Dynamic Program Characterization

inferred← citeshttps://doi.org/10.1002/9781394422791.ch14openalex-snapshot

Graph‐Based Anomaly Detection for Security Applications

inferred← citeshttps://doi.org/10.1002/cpe.4433openalex-snapshot

GraphBAD: A general technique for anomaly detection in security information and event management

inferred← citeshttps://doi.org/10.1007/978-3-030-01554-1_28openalex-snapshot

A Game Theoretical Framework for Inter-process Adversarial Intervention Detection

inferred← citeshttps://doi.org/10.1007/978-3-030-15032-7_108openalex-snapshot

How Important Are Logs of Ordinary Operations? Empirical Investigation of Anomaly Detection

inferred← citeshttps://doi.org/10.1007/978-3-030-34980-6_36openalex-snapshot

Link Prediction on Dynamic Heterogeneous Information Networks

inferred← citeshttps://doi.org/10.1007/978-3-030-57878-7_13openalex-snapshot

The Naked Sun: Malicious Cooperation Between Benign-Looking Processes

inferred← citeshttps://doi.org/10.1007/978-3-030-60290-1_15openalex-snapshot

LOCATE: Locally Anomalous Behavior Change Detection in Behavior Information Sequence

inferred← citeshttps://doi.org/10.1007/978-3-030-86362-3_9openalex-snapshot

CmaGraph: A TriBlocks Anomaly Detection Method in Dynamic Graph Using Evolutionary Community Representation Learning

inferred← citeshttps://doi.org/10.1007/978-3-030-90019-9_1openalex-snapshot

DeepHunter: A Graph Neural Network Based Approach for Robust Cyber Threat Hunting

inferred← citeshttps://doi.org/10.1007/978-3-030-93620-4_9openalex-snapshot

Challenges of Machine Learning for Data Streams in the Banking Industry

inferred← citeshttps://doi.org/10.1007/978-3-031-15919-0_11openalex-snapshot

DuSAG: An Anomaly Detection Method in Dynamic Graph Based on Dual Self-attention

inferred← citeshttps://doi.org/10.1007/978-3-031-20500-2_9openalex-snapshot

Purchase Pattern Based Anti-Fraud Framework in Online E-Commerce Platform Using Graph Neural Network

inferred← citeshttps://doi.org/10.1007/978-3-031-20862-1_11openalex-snapshot

Multi-view Heterogeneous Temporal Graph Neural Network for “Click Farming” Detection

inferred← citeshttps://doi.org/10.1007/978-3-031-25538-0_27openalex-snapshot

AttackMiner: A Graph Neural Network Based Approach for Attack Detection from Audit Logs

inferred← citeshttps://doi.org/10.1007/978-3-031-70365-2_20openalex-snapshot

GLADformer: A Mixed Perspective for Graph-Level Anomaly Detection

inferred← citeshttps://doi.org/10.1007/978-3-031-89363-6_15openalex-snapshot

ATKHunter: Towards Automated Attack Detection by Behavior Pattern Learning

inferred← citeshttps://doi.org/10.1007/978-3-031-97632-2_18openalex-snapshot

Joint Spatial-Temporal Representation for Host Intrusion Detection System

inferred← citeshttps://doi.org/10.1007/978-3-032-20080-8_11openalex-snapshot

Research on Emergency Response Attack Scenario Reconstruction Method Based on Steiner Trees

inferred← citeshttps://doi.org/10.1007/978-3-032-20080-8_3openalex-snapshot

An Unsupervised Anomaly Detection Method for Traceability Graphs Based on Masked Autoencoders

inferred← citeshttps://doi.org/10.1007/978-3-032-23453-7_5openalex-snapshot

Clark: a Transferable APT Detection Framework via Self-supervised Contrastive Learning

inferred← citeshttps://doi.org/10.1007/978-3-032-26370-4_20openalex-snapshot

Graph-Based Anomaly Detection in Transaction Networks Using Temporal Graph Neural Networks

inferred← citeshttps://doi.org/10.1007/978-981-15-9129-7_36openalex-snapshot

Detecting Advanced Persistent Threat in Edge Computing via Federated Learning

inferred← citeshttps://doi.org/10.1007/978-981-33-4102-9_99openalex-snapshot

A Markov Process-Based Anomaly Detection of Time Series Streaming Data

inferred← citeshttps://doi.org/10.1007/978-981-92-2856-0_17openalex-snapshot

HeteroGuard: Hop-Disentangled Representation Learning on Heterogeneous Provenance Graphs for APT Detection

inferred← citeshttps://doi.org/10.1007/978-981-92-3423-3_3openalex-snapshot

STORM: Scalable Real-Time Anomaly Detection on Large Heterogeneous System Graphs

inferred← citeshttps://doi.org/10.1007/978-981-95-3182-0_32openalex-snapshot

Chaos: Robust Spatio-Temporal Fusion for Generalizable APT Provenance Tracing

inferred← citeshttps://doi.org/10.1007/978-981-95-3906-2_2openalex-snapshot

Dual-Prompting Based Event Anomaly Detection in Dynamic Graphs

inferred← citeshttps://doi.org/10.1007/978-981-96-2417-1_13openalex-snapshot

GNNexPIDS: An Interpretation Method for Provenance-Based Intrusion Detection Based on GNNExplainer

inferred← citeshttps://doi.org/10.1007/978-981-96-4285-4_35openalex-snapshot

A Study on Efficient Provenance-Based Intrusion Detection System Using Few-Shot Graph Representation Learning

inferred← citeshttps://doi.org/10.1007/978-981-96-4503-9_19openalex-snapshot

A Novel Approach for Advanced Persistent Threats Detection via Graph Transformer

inferred← citeshttps://doi.org/10.1007/978-981-96-4503-9_23openalex-snapshot

Zypkro: A Node-Level Anomaly Detector for Provenance Graphs Based on Nonlinear Interaction and Adaptive Domain Techniques

inferred← citeshttps://doi.org/10.1007/978-981-96-5194-8_9openalex-snapshot

Behavioral Computing for Human Factor Security and Safety in Production

inferred← citeshttps://doi.org/10.1007/978-981-96-7005-5_25openalex-snapshot

AISSGR: Attack Investigation Based on Self-supervised Graph Representation Learning

inferred← citeshttps://doi.org/10.1007/978-981-96-9958-2_9openalex-snapshot

LCA-PRCA: Lowest Common Ancestor Embedding for Provenance-Based Intrusion Detection

inferred← citeshttps://doi.org/10.1007/s00521-022-07096-6openalex-snapshot

Evading behavioral classifiers: a comprehensive analysis on evading ransomware detection techniques

inferred← citeshttps://doi.org/10.1007/s00607-025-01590-0openalex-snapshot

FATE-X: a federated transferable and explainable deep learning framework for APT detection in serverless edge environments

inferred← citeshttps://doi.org/10.1007/s10115-021-01543-xopenalex-snapshot

Tracking triadic cardinality distributions for burst detection in high-speed graph streams

inferred← citeshttps://doi.org/10.1007/s10115-025-02606-zopenalex-snapshot

Graph representation learning method using diffusion sampling for dynamic graph anomaly detection

inferred← citeshttps://doi.org/10.1007/s10489-021-03109-4openalex-snapshot

Two-stage anomaly detection algorithm via dynamic community evolution in temporal graph

inferred← citeshttps://doi.org/10.1007/s10489-024-05475-1openalex-snapshot

Detection of advanced persistent threats using hashing and graph-based learning on streaming data

inferred← citeshttps://doi.org/10.1007/s10515-025-00538-0openalex-snapshot

DESCG: data encoding scheme classification with GNN in binary analysis

inferred← citeshttps://doi.org/10.1007/s11227-025-07902-7openalex-snapshot

Gs-Ocsvm: an APT attack detection method based on provenance graph

inferred← citeshttps://doi.org/10.1007/s11432-025-4776-xopenalex-snapshot

GNNFormer: capturing local interactions and long-term global dependencies for APT detection in provenance graphs

inferred← citeshttps://doi.org/10.1007/s11704-022-1270-yopenalex-snapshot

Human-machine interactive streaming anomaly detection by online self-adaptive forest

inferred← citeshttps://doi.org/10.1007/s11704-025-50797-zopenalex-snapshot

SecGuard: multi-dimensional provenance analysis for self-supervised APT detection

inferred← citeshttps://doi.org/10.1007/s40747-022-00695-9openalex-snapshot

Anomaly detection for high-dimensional space using deep hypersphere fused with probability approach

inferred← citeshttps://doi.org/10.1007/s41019-025-00339-1openalex-snapshot

Unsupervised Anomaly Detection on Attributed Multiplex Heterogeneous Networks

inferred← citeshttps://doi.org/10.1007/s44443-026-00731-5openalex-snapshot

Prov-Trust: Zero-trust dynamic access control technology based on anomaly detection of provenance graph

inferred← citeshttps://doi.org/10.1016/j.actaastro.2024.02.019openalex-snapshot

Transformer-based anomaly detection in P-LEO constellations: A dynamic graph approach

inferred← citeshttps://doi.org/10.1016/j.comnet.2019.07.002openalex-snapshot

Outlier detection in IP traffic modelled as a link stream using the stability of degree distributions over time

inferred← citeshttps://doi.org/10.1016/j.comnet.2024.110757openalex-snapshot

Graph-based insider threat detection: A survey

inferred← citeshttps://doi.org/10.1016/j.comnet.2025.111806openalex-snapshot

MGDA: A provenance graph-based framework for threat detection and attack scenario reconstruction

inferred← citeshttps://doi.org/10.1016/j.comnet.2026.112703openalex-snapshot

TRACEGEN: Adversarial attack against DL-based attack investigations with generative pre-trained model

inferred← citeshttps://doi.org/10.1016/j.cose.2022.102875openalex-snapshot

APT beaconing detection: A systematic review

inferred← citeshttps://doi.org/10.1016/j.cose.2024.104159openalex-snapshot

Provenance-based APT campaigns detection via masked graph representation learning

inferred← citeshttps://doi.org/10.1016/j.cose.2024.104263openalex-snapshot

AJSAGE: A intrusion detection scheme based on Jump-Knowledge Connection To GraphSAGE

inferred← citeshttps://doi.org/10.1016/j.cose.2025.104588openalex-snapshot

MIRDETECTOR: Applying malicious intent representation for enhanced APT anomaly detection

inferred← citeshttps://doi.org/10.1016/j.engappai.2026.113861openalex-snapshot

Dinspector: Dual factor graph attention mechanism for Advanced Persistent Threat detection

inferred← citeshttps://doi.org/10.1016/j.eswa.2024.125877openalex-snapshot

A dynamic provenance graph-based detector for advanced persistent threats

inferred← citeshttps://doi.org/10.1016/j.future.2020.02.015openalex-snapshot

A baseline for unsupervised advanced persistent threat detection in system-level provenance

inferred← citeshttps://doi.org/10.1016/j.future.2024.06.050openalex-snapshot

Hack me if you can: Aggregating autoencoders for countering persistent access threats within highly imbalanced data

inferred← citeshttps://doi.org/10.1016/j.jisa.2025.104057openalex-snapshot

Commander: A robust cross-machine multi-phase Advanced Persistent Threat detector via provenance analytics

inferred← citeshttps://doi.org/10.1016/j.jnca.2024.104036openalex-snapshot

RT-APT: A real-time APT anomaly detection method for large-scale provenance graph

inferred← citeshttps://doi.org/10.1016/j.knosys.2019.105138openalex-snapshot

Discriminative Streaming Network Embedding

inferred← citeshttps://doi.org/10.1016/j.knosys.2025.113962openalex-snapshot

Structural-temporal mining for motif-level anomaly detection in dynamic graphs

inferred← citeshttps://doi.org/10.1016/j.neunet.2023.07.026openalex-snapshot

RegraphGAN: A graph generative adversarial network model for dynamic network anomaly detection

inferred← citeshttps://doi.org/10.1016/j.patcog.2020.107746openalex-snapshot

A simple graph embedding for anomaly detection in a stream of heterogeneous labeled graphs

inferred← citeshttps://doi.org/10.1016/s1005-8885(17)60243-7openalex-snapshot

Anomaly detection in smart grid based on encoder-decoder framework with recurrent neural network

inferred← citeshttps://doi.org/10.1038/s41598-021-01638-zopenalex-snapshot

Survey on security issues of routing and anomaly detection for space information networks

inferred← citeshttps://doi.org/10.1049/ise2/8625988openalex-snapshot

ProvADShield: A Multimodel Ensemble Defender Against Adversarial Attacks on Provenance Graph Host Intrusion Detector

inferred← citeshttps://doi.org/10.1080/08874417.2023.2267510openalex-snapshot

Deep Temporal Graph Infomax for Imbalanced Insider Threat Detection

inferred← citeshttps://doi.org/10.1089/big.2021.0069openalex-snapshot

On Using Classification Datasets to Evaluate Graph Outlier Detection: Peculiar Observations and New Insights

inferred← citeshttps://doi.org/10.1109/access.2018.2864871openalex-snapshot

Malytics: A Malware Detection Scheme

inferred← citeshttps://doi.org/10.1109/access.2023.3275789openalex-snapshot

Graph Neural Networks for Intrusion Detection: A Survey

inferred← citeshttps://doi.org/10.1109/access.2025.3607497openalex-snapshot

A Review on Multi-Step Attack Detection

inferred← citeshttps://doi.org/10.1109/access.2026.3730461openalex-snapshot

Multi-Layer APT Detection Framework With OSINT Enrichment

inferred← citeshttps://doi.org/10.1109/acsac63791.2024.00075openalex-snapshot

Madeline: Continuous and Low-cost Monitoring with Graph-free Representations to Combat Cyber Threats

inferred← citeshttps://doi.org/10.1109/acsacw69556.2025.00064openalex-snapshot

A New Hope for DARPA OpTC

inferred← citeshttps://doi.org/10.1109/bigdata47090.2019.9006156openalex-snapshot

Detecting DoS Attack in Smart Home IoT Devices Using a Graph-Based Approach

inferred← citeshttps://doi.org/10.1109/bigdata50022.2020.9378346openalex-snapshot

AutoAudit: Mining Accounting and Time-Evolving Graphs

inferred← citeshttps://doi.org/10.1109/bigdata52589.2021.9671424openalex-snapshot

Anomaly Detection in Edge Streams Using Term Frequency-Inverse Graph Frequency (TF-IGF) Concept

inferred← citeshttps://doi.org/10.1109/bigdata62323.2024.10825928openalex-snapshot

Fine-grained Graph-based Anomaly Detection on Vehicle Controller Area Networks

inferred← citeshttps://doi.org/10.1109/cloud62652.2024.00016openalex-snapshot

Tracemesh: Scalable and Streaming Sampling for Distributed Traces

inferred← citeshttps://doi.org/10.1109/cns48642.2020.9162264openalex-snapshot

Evolving Advanced Persistent Threat Detection using Provenance Graph and Metric Learning

inferred← citeshttps://doi.org/10.1109/cns62487.2024.10735484openalex-snapshot

NetHawk : Hunting Advanced Persistent Threats via Structural and Temporal Graph Anomalies

inferred← citeshttps://doi.org/10.1109/cscloud66326.2025.00010openalex-snapshot

Dynamic Feature Clustering for Anomaly Detection in Streaming Cybersecurity Data

inferred← citeshttps://doi.org/10.1109/cscwd61410.2024.10580067openalex-snapshot

PG-AID: An Anomaly-based Intrusion Detection Method Using Provenance Graph

inferred← citeshttps://doi.org/10.1109/cscwd64889.2025.11033337openalex-snapshot

KanIDS: An Intrusion Detection System for All Kernel Interactions Based on Kolmogorov-Arnold Network

inferred← citeshttps://doi.org/10.1109/cscwd64889.2025.11033519openalex-snapshot

PanThreat: Global Resource-Based Anomaly Detection for APTs

inferred← citeshttps://doi.org/10.1109/cscwd64889.2025.11033670openalex-snapshot

Pegasus: Accelerating Provenance Graph-based Intrusion Detection Methods

inferred← citeshttps://doi.org/10.1109/cscwd68734.2026.11581484openalex-snapshot

MGFE: An Efficient APT Detection Method Based on Multi-granularity Feature Extraction of the Provenance Graph

inferred← citeshttps://doi.org/10.1109/cscwd68734.2026.11582008openalex-snapshot

LogMamba: Efficient Graph-Level Anomaly Detection for APTs via State Space Models

inferred← citeshttps://doi.org/10.1109/cscwd68734.2026.11582115openalex-snapshot

Alluvion: Efficient APT Detection via Two-Tower Provenance Graph Encoding

inferred← citeshttps://doi.org/10.1109/cscwd68734.2026.11582811openalex-snapshot

GEFS:APT Tactic/Technique Recognition via Generative and Evolutionary Few-Shot Learning

inferred← citeshttps://doi.org/10.1109/csnet56116.2022.9955596openalex-snapshot

GRAFFITO-IDS: A Graph-based Algorithm for Feature Enrichment on Online Intrusion Detection Systems

inferred← citeshttps://doi.org/10.1109/dcoss-iot69657.2026.00105openalex-snapshot

Graph-Temporal Intrusion Detection for IoT: A Heterogeneous Ensemble Approach

inferred← citeshttps://doi.org/10.1109/dsaa60987.2023.10302626openalex-snapshot

HRGCN: Heterogeneous Graph-level Anomaly Detection with Hierarchical Relation-augmented Graph Neural Networks

inferred← citeshttps://doi.org/10.1109/dsaa61799.2024.10722819openalex-snapshot

Using Hypervectors for Efficient Anomaly Detection in Graph Streams

inferred← citeshttps://doi.org/10.1109/dsc53577.2021.00098openalex-snapshot

APT Detection Based on Association Rule Mining with Bayesian Model

inferred← citeshttps://doi.org/10.1109/ecrime66200.2024.00009openalex-snapshot

EAGLEEYE: Attention to Unveil Malicious Event Sequences From Provenance Graphs

inferred← citeshttps://doi.org/10.1109/esci63694.2025.10988235openalex-snapshot

Efficient Host Threat Detection Using The Procsage Method

inferred← citeshttps://doi.org/10.1109/eurosp68448.2026.00065openalex-snapshot

GRAAL: GRAph-based Analysis of Logs for Advanced AI-based Intrusion Detection Systems

inferred← citeshttps://doi.org/10.1109/eurospw59978.2023.00042openalex-snapshot

From Tactics to Techniques: A Systematic Attack Modeling for Advanced Persistent Threats in Industrial Control Systems

inferred← citeshttps://doi.org/10.1109/hpcc-dss-smartcity-dependsys53884.2021.00076openalex-snapshot

BEDIM: Lateral Movement Detection In Enterprise Network Through Behavior Deviation Measurement

inferred← citeshttps://doi.org/10.1109/ic2e55432.2022.00035openalex-snapshot

PACED: Provenance-based Automated Container Escape Detection

inferred← citeshttps://doi.org/10.1109/icassp55912.2026.11460577openalex-snapshot

Polaris: Detecting Advanced Persistent Threat on Provenance Graphs via Siamese Masked Graph Representation

inferred← citeshttps://doi.org/10.1109/icc45041.2023.10279468openalex-snapshot

Tell Me More: Black Box Explainability for APT Detection on System Provenance Graphs

inferred← citeshttps://doi.org/10.1109/iccc65529.2025.11148870openalex-snapshot

APTD: APT Detection Through Enhanced Provenance Graph Learning

inferred← citeshttps://doi.org/10.1109/icde65706.2026.00204openalex-snapshot

ShareFlow: An Efficient Framework for Multi-Query Continuous Subgraph Matching

inferred← citeshttps://doi.org/10.1109/icdm.2018.00117openalex-snapshot

SedanSpot: Detecting Anomalies in Edge Streams

inferred← citeshttps://doi.org/10.1109/icdmw.2016.0020openalex-snapshot

Query-Based Evolutionary Graph Cuboid Outlier Detection

inferred← citeshttps://doi.org/10.1109/icdmw58026.2022.00097openalex-snapshot

Self-Organizing Map-Based Graph Clustering and Visualization on Streaming Graphs

inferred← citeshttps://doi.org/10.1109/icdmw60847.2023.00148openalex-snapshot

Continuous-Time Temporal Graph Learning on Provenance Graphs

inferred← citeshttps://doi.org/10.1109/ichms53169.2021.9582631openalex-snapshot

Tree-based Self-adaptive Anomaly Detection by Human-Machine Interaction

inferred← citeshttps://doi.org/10.1109/icicr61203.2024.00027openalex-snapshot

Anomaly Detection in Spatial Information Networks: A Security Knowledge Graph-based Approach

inferred← citeshttps://doi.org/10.1109/icmla52953.2021.00273openalex-snapshot

PROV-GEM: Automated Provenance Analysis Framework using Graph Embeddings

inferred← citeshttps://doi.org/10.1109/icmla58977.2023.00190openalex-snapshot

IoT-MGSec: Mitigating Man-in-the-Middle Attacks in IoT Networks Using Graph-Based Learning

inferred← citeshttps://doi.org/10.1109/icnas68168.2025.11298075openalex-snapshot

ThreatsMaps: Automatic adjustment of CTI with the Running System

inferred← citeshttps://doi.org/10.1109/icpads60453.2023.00059openalex-snapshot

ProDE: Interpretable APT Detection Method Based on Encoder-decoder Architecture

inferred← citeshttps://doi.org/10.1109/icpr48806.2021.9412253openalex-snapshot

Combining GANs and AutoEncoders for efficient anomaly detection

inferred← citeshttps://doi.org/10.1109/icraset59632.2023.10420133openalex-snapshot

Leveraging Deep Learning Techniques for Profiling and Categorizing Lung and Pancreatic Tumors

inferred← citeshttps://doi.org/10.1109/icraset59632.2023.10420255openalex-snapshot

From Data Packets to Secure Networks with Advanced Analytical Frameworks for a Comprehensive Understanding of Threat Landscapes

inferred← citeshttps://doi.org/10.1109/icsp58490.2023.10248606openalex-snapshot

Detecting Anomalous Behaviours Based on System Logs: A Dynamic Graph Perspective

inferred← citeshttps://doi.org/10.1109/ictbig59752.2023.10456022openalex-snapshot

Neural Network Solutions for Advanced Persistent Threat Analysis

inferred← citeshttps://doi.org/10.1109/ijcnn64981.2025.11228350openalex-snapshot

PORTIA: A Multi-Granularity APT Detection Model Based on Provenance Graphs

inferred← citeshttps://doi.org/10.1109/ijcnn64981.2025.11228446openalex-snapshot

TRAIL: A Transformer-Enhanced Feature Embedding Approach for Unsupervised Anomaly Detection

inferred← citeshttps://doi.org/10.1109/ijcnn64981.2025.11229381openalex-snapshot

MOLE: Provenance Graph Generation Framework Based on LLM Prompting

inferred← citeshttps://doi.org/10.1109/infocom59046.2026.11571209openalex-snapshot

Clearing the Clutter: Real-Time Program-Specific Log Consolidation for APT Detection

inferred← citeshttps://doi.org/10.1109/iscc61673.2024.10733665openalex-snapshot

Devil in the Noise: Detecting Advanced Persistent Threats with Backbone Extraction

inferred← citeshttps://doi.org/10.1109/isdfs69419.2026.11458917openalex-snapshot

Neuro-Symbolic Graph Autoencoders with Rare Pattern Mining for Provenance-Based Anomaly Detection

inferred← citeshttps://doi.org/10.1109/ispa67752.2025.00202openalex-snapshot

MGALM: Interpretability-Enhanced APT Detection Using Masked Graph Autoencoders and Large Language Models

inferred← citeshttps://doi.org/10.1109/itnec60942.2024.10733125openalex-snapshot

Research on APT Attack Detection Methods for Power Information Systems

inferred← citeshttps://doi.org/10.1109/iwqos65803.2025.11143256openalex-snapshot

Embedding More Knowledge: Strategic Graph Masking Based Advanced Persistent Threats Detection

inferred← citeshttps://doi.org/10.1109/jiot.2025.3633319openalex-snapshot

ContrastMatcher: Adaptive Contrastive Provenance Graph Matching for Host-Based Attack Detection

inferred← citeshttps://doi.org/10.1109/milcom47813.2019.9020815openalex-snapshot

An Online System Dependency Graph Anomaly Detection based on Extended Weisfeiler-Lehman Kernel

inferred← citeshttps://doi.org/10.1109/mnet.2024.3389734openalex-snapshot

Combating Advanced Persistent Threats: Challenges and Solutions

inferred← citeshttps://doi.org/10.1109/msn69125.2025.00040openalex-snapshot

RDD: Real-time Dynamic Detection of APT Attacks Based on Provenance Graph Matching

inferred← citeshttps://doi.org/10.1109/nana63151.2024.00093openalex-snapshot

Improving the Accuracy of Anomaly Detection from System Audit Logs via Heterogeneous Provenance Graphs

inferred← citeshttps://doi.org/10.1109/ngdn61651.2024.10744054openalex-snapshot

EFSNet: A Threat Detection Method Based on System Event Feature Sequence

inferred← citeshttps://doi.org/10.1109/noms54207.2022.9789921openalex-snapshot

Pikachu: Temporal Walk Based Dynamic Graph Embedding for Network Anomaly Detection

inferred← citeshttps://doi.org/10.1109/ojcs.2025.3584942openalex-snapshot

Deep Temporal and Structural Embeddings for Robust Unsupervised Anomaly Detection in Dynamic Graphs

inferred← citeshttps://doi.org/10.1109/smc58881.2025.11343010openalex-snapshot

NAHID: Node-Level Host Intrusion Detection Based on Provenance Graph

inferred← citeshttps://doi.org/10.1109/sp.2019.00026openalex-snapshot

HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows

inferred← citeshttps://doi.org/10.1109/sp40000.2020.00079openalex-snapshot

Throwing Darts in the Dark? Detecting Bots with Limited Data using Neural Data Augmentation

inferred← citeshttps://doi.org/10.1109/sp46215.2023.10179405openalex-snapshot

SoK: History is a Vast Early Warning System: Auditing the Provenance of System Intrusions

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00005openalex-snapshot

Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00139openalex-snapshot

Flash: A Comprehensive Approach to Intrusion Detection via Provenance Graph Representation Learning

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00253openalex-snapshot

R-CAID: Embedding Root Cause Analysis within Provenance-based Intrusion Detection

inferred← citeshttps://doi.org/10.1109/sp61157.2025.00112openalex-snapshot

What We Talk About When We Talk About Logs: Understanding the Effects of Dataset Quality on Endpoint Threat Detection Research

inferred← citeshttps://doi.org/10.1109/sp63933.2026.00202openalex-snapshot

A Context Is Worth a Thousand Lies: Evading Intrusion Detectors via Intelligent Context Distortion

inferred← citeshttps://doi.org/10.1109/sp63933.2026.00242openalex-snapshot

Beyond Nodes vs. Edges: A Multi-View Fusion Framework for Provenance-Based Intrusion Detection

inferred← citeshttps://doi.org/10.1109/spcom71105.2026.11622918openalex-snapshot

SIADS: Innovation-Based Anomaly Detection in Streaming Communication Graphs

inferred← citeshttps://doi.org/10.1109/tccn.2025.3538020openalex-snapshot

Asynchronous Decentralized Federated Anomaly Detection for 6G Networks

inferred← citeshttps://doi.org/10.1109/tce.2025.3573163openalex-snapshot

Anomaly Detection in Dynamic Graphs Using Multiple Encoding Strategies via Transformers

inferred← citeshttps://doi.org/10.1109/tce.2025.3592903openalex-snapshot

HASGDetector: An Effective Host-Based Intrusion Anomaly Detection Framework With Large-Scale Attribute Heterogeneous Graphs

inferred← citeshttps://doi.org/10.1109/tdsc.2020.2971484openalex-snapshot

Conan: A Practical Real-Time APT Detection System With High Accuracy and Efficiency

inferred← citeshttps://doi.org/10.1109/tdsc.2022.3221789openalex-snapshot

Advanced Persistent Threat Detection Using Data Provenance and Metric Learning

inferred← citeshttps://doi.org/10.1109/tdsc.2025.3599661openalex-snapshot

Resist Dependency Explosion in Attack Investigation With Splittable Tag Propagation and Aggregation

inferred← citeshttps://doi.org/10.1109/tdsc.2025.3609834openalex-snapshot

Alert2Vec: Eliminating Alert Fatigue by Embedding Security Alerts Through Subgraph Learning

inferred← citeshttps://doi.org/10.1109/tdsc.2025.3640696openalex-snapshot

SAGA: Synthetic Audit Log Generation for APT Campaigns

inferred← citeshttps://doi.org/10.1109/tdsc.2026.3706099openalex-snapshot

Uncertainty-Aware Dynamic Learning With Fuzzy-Guided Temporal Aggregation for Reliable Anomaly Detection

inferred← citeshttps://doi.org/10.1109/tdsc.2026.3710034openalex-snapshot

Ppin: Anomaly-Based Intrusion Detection on Provenance Graph via Behavior Pattern Mining

inferred← citeshttps://doi.org/10.1109/tifs.2022.3208815openalex-snapshot

THREATRACE: Detecting and Tracing Host-Based Threats in Node Level Through Provenance Graph Learning

inferred← citeshttps://doi.org/10.1109/tifs.2023.3272731openalex-snapshot

Motif-Level Anomaly Detection in Dynamic Graphs

inferred← citeshttps://doi.org/10.1109/tifs.2024.3396390openalex-snapshot

MEGR-APT: A Memory-Efficient APT Hunting System Based on Attack Representation Learning

inferred← citeshttps://doi.org/10.1109/tifs.2025.3557742openalex-snapshot

TAGAPT: Toward Automatic Generation of APT Samples With Provenance-Level Granularity

inferred← citeshttps://doi.org/10.1109/tifs.2025.3592824openalex-snapshot

Dehydrator: Enhancing Provenance Graph Storage via Hierarchical Encoding and Sequence Generation

inferred← citeshttps://doi.org/10.1109/tifs.2025.3601381openalex-snapshot

TeRed: Normal Behavior-Based Efficient Provenance Graph Reduction for Large-Scale Attack Forensics

inferred← citeshttps://doi.org/10.1109/tifs.2025.3610063openalex-snapshot

Hypergraph-Driven Anomaly Detection in Dynamic Noisy Graphs

inferred← citeshttps://doi.org/10.1109/tifs.2026.3653175openalex-snapshot

TraceCluster: A Lightweight and Adaptive Clustering-Based Subgraph Attention Network for APT Detection in Provenance Graphs

inferred← citeshttps://doi.org/10.1109/tifs.2026.3736700openalex-snapshot

TRAPShield: Real-Time APT File Theft Defense With Multi-Domain Behavioral Characterization and Transparent Decoy Redirection

inferred← citeshttps://doi.org/10.1109/tkde.2019.2905606openalex-snapshot

Generative Adversarial Active Learning for Unsupervised Outlier Detection

inferred← citeshttps://doi.org/10.1109/tkde.2021.3118815openalex-snapshot

A Comprehensive Survey on Graph Anomaly Detection With Deep Learning

inferred← citeshttps://doi.org/10.1109/tkde.2021.3124061openalex-snapshot

Anomaly Detection in Dynamic Graphs via Transformer

inferred← citeshttps://doi.org/10.1109/tkde.2024.3523857openalex-snapshot

A Survey of Change Point Detection in Dynamic Graphs

inferred← citeshttps://doi.org/10.1109/tkde.2025.3642127openalex-snapshot

Adaptive Change Detection in Partially Observable Dynamic Networks

inferred← citeshttps://doi.org/10.1109/tkde.2026.3665892openalex-snapshot

Explainable Anomaly Detection in Dynamic Heterogeneous Graphs via Relation Evolution

inferred← citeshttps://doi.org/10.1109/tnse.2026.3672038openalex-snapshot

Network-Centric Auditing and Regulation for Cryptocurrency Systems: A Tutorial

inferred← citeshttps://doi.org/10.1109/tpami.2023.3263079openalex-snapshot

muxGNN: Multiplex Graph Neural Network for Heterogeneous Graphs

inferred← citeshttps://doi.org/10.1109/trustcom56396.2022.00106openalex-snapshot

Deepro: Provenance-based APT Campaigns Detection via GNN

inferred← citeshttps://doi.org/10.1109/trustcom60117.2023.00024openalex-snapshot

Representation-enhanced APT Detection Using Contrastive Learning

inferred← citeshttps://doi.org/10.1109/trustcom66490.2025.00047openalex-snapshot

EdgeTrace: A Context-Aware Anomalous Edge Detection Framework for APT Traceback

inferred← citeshttps://doi.org/10.1109/trustcom66490.2025.00057openalex-snapshot

APT-GCM: Advanced Persistent Threats Detection via Graph Contrastive Masked Representation Learning

inferred← citeshttps://doi.org/10.1109/trustcom66490.2025.00113openalex-snapshot

PROV-LLM: Advanced Persistent Threat Detection Based on Process Behavior Subgraphs Using Large Language Models

inferred← citeshttps://doi.org/10.1145/3018896.3056808openalex-snapshot

Security auditing in the fog

inferred← citeshttps://doi.org/10.1145/3133956.3134045openalex-snapshot

RAIN

inferred← citeshttps://doi.org/10.1145/3219819.3220024openalex-snapshot

NetWalk

inferred← citeshttps://doi.org/10.1145/3219819.3220040openalex-snapshot

SpotLight

inferred← citeshttps://doi.org/10.1145/3219819.3220107openalex-snapshot

xStream

inferred← citeshttps://doi.org/10.1145/3243734.3243829openalex-snapshot

Threat Intelligence Computing

inferred← citeshttps://doi.org/10.1145/3269206.3271698openalex-snapshot

TGNet

inferred← citeshttps://doi.org/10.1145/3292500.3330672openalex-snapshot

Robust Anomaly Detection for Multivariate Time Series through Stochastic Recurrent Neural Network

inferred← citeshttps://doi.org/10.1145/3357384.3357802openalex-snapshot

System Deterioration Detection and Root Cause Learning on Time Series Graphs

inferred← citeshttps://doi.org/10.1145/3372297.3423355openalex-snapshot

Mnemosyne: An Effective and Efficient Postmortem Watering Hole Attack Investigation System

inferred← citeshttps://doi.org/10.1145/3391800.3398175openalex-snapshot

Xanthus: Push-button Orchestration of Host Provenance Data Collection

inferred← citeshttps://doi.org/10.1145/3427228.3427272openalex-snapshot

On the Forensic Validity of Approximated Audit Logs

inferred← citeshttps://doi.org/10.1145/3437963.3441806openalex-snapshot

F-FADE: Frequency Factorization for Anomaly Detection in Edge Streams

showing the first 200 of 289

Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.