{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:48:09Z","timestamp":1763192889815,"version":"3.45.0"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11228350","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-9","source":"Crossref","is-referenced-by-count":0,"title":["PORTIA: A Multi-Granularity APT Detection Model Based on Provenance Graphs"],"prefix":"10.1109","author":[{"given":"Yiming","family":"Ren","sequence":"first","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering"}]},{"given":"Haoyang","family":"Chen","sequence":"additional","affiliation":[{"name":"The University of Sydney"}]},{"given":"Haoqiang","family":"Wang","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering"}]},{"given":"Yilong","family":"Chen","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering"}]},{"given":"Zhou","family":"Zhou","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering"}]},{"given":"Chengxiang","family":"Si","sequence":"additional","affiliation":[{"name":"Coordination Center of China (CNCERT\/CC),National Computer Network Emergency Response Technical Team"}]},{"given":"Qingyun","family":"Liu","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/319709.319712"},{"year":"2024","key":"ref2","article-title":"Adversarial tactics, techniques and common knowledge"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24083"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787502"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1151659.1159952"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2017.2753044"},{"key":"ref7","first-page":"373","article-title":"AIRTAG: Towards Automated Attack Investigation by Unsupervised Learning with Log Texts","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Ding"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179405"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"ref11","first-page":"3005","article-title":"{ATLAS}: A sequence-based learning approach for attack investigation","volume-title":"30th USENIX security symposium (USENIX security 21)","author":"Alsaheel"},{"key":"ref12","first-page":"5197","article-title":"MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Jia"},{"year":"2024","key":"ref13","article-title":"Sbustreamspot data"},{"year":"2024","key":"ref14","article-title":"Unicorn wget data"},{"key":"ref15","first-page":"4355","article-title":"PROGRAPHER: An Anomaly Detection System based on Provenance Graph Embedding","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Yang"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA52953.2021.00273"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24167"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2013.6620049"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678773"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24046"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3208815"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539321"},{"year":"2024","key":"ref29","article-title":"Transparent computing"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11228350.pdf?arnumber=11228350","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:43:47Z","timestamp":1763192627000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11228350\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11228350","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}