{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T19:16:49Z","timestamp":1785957409155,"version":"3.56.0"},"reference-count":116,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3607497","type":"journal-article","created":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T17:47:20Z","timestamp":1757353640000},"page":"161779-161805","source":"Crossref","is-referenced-by-count":7,"title":["A Review on Multi-Step Attack Detection"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-5674-5499","authenticated-orcid":false,"given":"Syed Usman","family":"Shaukat","sequence":"first","affiliation":[{"name":"School of computing and engineering, University of Huddersfield, Huddersfield, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8613-8200","authenticated-orcid":false,"given":"Saad","family":"Khan","sequence":"additional","affiliation":[{"name":"School of computing and engineering, University of Huddersfield, Huddersfield, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1747-9914","authenticated-orcid":false,"given":"Simon","family":"Parkinson","sequence":"additional","affiliation":[{"name":"School of computing and engineering, University of Huddersfield, Huddersfield, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA49311.2020.9139697"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18517\/ijaseit.9.2.7591"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MobiSecServ58080.2023.10329144"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/tase.2022.3149764"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS47738.2020.9110439"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SERVICES.2019.00096"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/dsc53577.2021.00031"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CIC58953.2023.00025"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS56262.2023.10041418"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.03.014"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00170"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CloudNet59005.2023.10490046"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom60117.2023.00172"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC55528.2022.9912978"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/RIVF60135.2023.10471768"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.23919\/FRUCT58615.2023.10143048"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SIN56466.2022.9970551"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom60117.2023.00095"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICAITPR51569.2022.9844219"},{"key":"ref20","first-page":"332","article-title":"Distributed detection of anomalies in network flow using GANs","volume-title":"Proc. IEEE RusAutoCon","author":"Grekov"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.3012907"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CISAI54367.2021.00091"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SmartWorld-UIC-ATC-ScalCom-DigitalTwin-PriComp-Metaverse56740.2022.00113"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/AEECA55500.2022.9919107"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICISC47916.2020.9171106"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3332512"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3240315"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3168976"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACIT58888.2023.10453849"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/tvt.2024.3392793"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3143551"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CCCI58712.2023.10290797"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2024.109249"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/DSC53577.2021.00069"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2025.111363"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/dsc55868.2022.00075"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0300821"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-024-04510-7"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006328"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/WETICE.2019.00019"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/NAPS56150.2022.10012180"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CSNet50428.2020.9265466"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/RIVF60135.2023.10471853"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3165624"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CCPIS59145.2023.10291485"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/DSC61021.2023.10354155"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM48099.2022.10000811"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/isncc49221.2020.9297233"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3338136"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICISCE48695.2019.00016"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/HDIS56859.2022.9991678"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICAICA58456.2023.10405397"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/tase.2024.3395355"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00106"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp.2019.00033"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom60117.2023.00067"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2021.3101649"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/DSC55868.2022.00008"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/CITA58204.2023.10262639"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SmartIndustryCon61328.2024.10516137"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2961517"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2019.00291"},{"key":"ref64","first-page":"48","article-title":"Machine learning-based approach for enhancing multi-step attack prediction","volume-title":"Proc. 24th Asia\u2013Pacific Netw. Oper. Manage. Symp. (APNOMS)","author":"Li"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SIECPC.2013.6550973"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICTON59386.2023.10207370"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-17637-3"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SYSCON.2011.5929072"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSIT.2010.5563843"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/ICTSA52017.2021.9406548"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/tvt.2020.2995133"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/DSC59305.2023.00076"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/ISNCC49221.2020.9297290"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ssci.2016.7849902"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPSW.2014.133"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm52983.2022.9961016"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/IMCEC59810.2024.10575432"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/SOLI60636.2023.10425463"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT56998.2023.10306968"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.2982057"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2022.3195407"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/IMCEC.2016.7867441"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp.2019.00033"},{"key":"ref85","first-page":"376","article-title":"A multi-step attack pattern discovery method based on graph mining","volume-title":"Proc. 2nd Int. Conf. Comput. Sci. Netw. Technol.","author":"Xu"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2019.8761487"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.3390\/math12101447"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2014.19"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/mmit.2010.60"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2013.144"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2015.7312765"},{"key":"ref92","first-page":"124","article-title":"Applying data fusion in collaborative alerts correlation","volume-title":"Proc. Int. Symp. Comput. Sci. Comput. Technol.","author":"Zhuang"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.03.001"},{"key":"ref94","article-title":"Understanding advanced persistent threat: A survey","volume":"2020","author":"Huang","year":"2020","journal-title":"Secur. Commun. Netw."},{"key":"ref95","volume-title":"Threat Intelligence Report","year":"2024"},{"key":"ref96","volume-title":"Shifting Attack Landscapes and Sectors in Q1 2024 With a 28% Increase in Cyber Attacks Globally","year":"2024"},{"key":"ref97","volume-title":"The Changing Cyber Threat Landscape Asia\u2013Pacific (APAC) Region-Volume 1","year":"2024"},{"key":"ref98","volume-title":"Cybercrime Trends 2024: The Latest Threats and Security Best Practices","year":"2024"},{"key":"ref99","volume-title":"CISCO-TALOS: Year in Review","year":"2022"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/csrswtc64338.2024.10811514"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/iceca63461.2024.10801010"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/ciot63799.2024.10757005"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/csr61664.2024.10679501"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/iccea62105.2024.10603935"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/usbereit61901.2024.10584030"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/icict62343.2024.00056"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2024.3407655"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3396210"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/tc.2024.3349659"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/tsg.2023.3272749"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-32467-8_20"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/asew60602.2023.00012"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3312291"},{"key":"ref114","article-title":"Exploring autonomous agents through the lens of large language models: A review","author":"Barua","year":"2024","journal-title":"arXiv:2404.04442"},{"key":"ref115","article-title":"A survey on retrieval-augmented text generation for large language models","author":"Huang","year":"2024","journal-title":"arXiv:2404.10981"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103694"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11153648.pdf?arnumber=11153648","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T17:38:22Z","timestamp":1758303502000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11153648\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":116,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3607497","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}