{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T16:33:48Z","timestamp":1771950828224,"version":"3.50.1"},"reference-count":49,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,7,2]],"date-time":"2025-07-02T00:00:00Z","timestamp":1751414400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,2]],"date-time":"2025-07-02T00:00:00Z","timestamp":1751414400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key R&D Program of China","doi-asserted-by":"publisher","award":["2023YFB3106900"],"award-info":[{"award-number":["2023YFB3106900"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302362,62472337"],"award-info":[{"award-number":["62302362,62472337"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["YJSJ25012"],"award-info":[{"award-number":["YJSJ25012"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,7,2]]},"DOI":"10.1109\/iwqos65803.2025.11143256","type":"proceedings-article","created":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T17:29:52Z","timestamp":1757438992000},"page":"1-10","source":"Crossref","is-referenced-by-count":2,"title":["Embedding More Knowledge: Strategic Graph Masking Based Advanced Persistent Threats Detection"],"prefix":"10.1109","author":[{"given":"Junbo","family":"Jia","sequence":"first","affiliation":[{"name":"Xidian University,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li","family":"Yang","sequence":"additional","affiliation":[{"name":"Shaanxi Key Laboratory of Network and System Security,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lu","family":"Zhou","sequence":"additional","affiliation":[{"name":"Xidian University,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anyuan","family":"Sang","sequence":"additional","affiliation":[{"name":"Xidian University,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huipeng","family":"Yang","sequence":"additional","affiliation":[{"name":"Xidian University,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ao","family":"Wang","sequence":"additional","affiliation":[{"name":"Xidian University,Xi&#x0027;an,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","year":"2024","journal-title":"France reports over 140 cyberattacks linked to olympics"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-023-04603-y"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref4","article-title":"MAGIC: detecting advanced persistent threats via masked graph representation learning","volume-title":"33rd USENIX Security Symposium, USENIX Security 2024, Philadelphia, PA, USA, August 14\u201316, 2024","author":"Jia","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3243667"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24167"},{"key":"ref9","first-page":"2461","article-title":"\\{Back-Propagating\\} system dependency impact for attack investigation","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Fang","year":"2022"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"ref13","first-page":"3005","article-title":"\\{ATLAS\\}: A sequence-based learning approach for attack investigation","volume-title":"30th USENIX security symposium (USENIX security 21)","author":"Alsaheel","year":"2021"},{"key":"ref14","first-page":"905","article-title":"Attack2vec: leveraging temporal word embeddings to understand the evolution of cyberattacks","volume-title":"Proceedings of the 28th USENIX Conference on Security Symposium, ser. SEC\u201919. USA: USENIX Association","author":"Shen","year":"2019"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00139"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3208815"},{"key":"ref18","article-title":"Inductive representation learning on large graphs","volume":"30","author":"Hamilton","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref19","author":"StreamSpot","year":"2021","journal-title":"Sbu streamspot dataset"},{"key":"ref20","author":"Project","year":"2021","journal-title":"Unicorn wget dataset"},{"key":"ref21","author":"D","year":"2021","journal-title":"Darpa transparent computing dataset"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"ref23","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2020.24046","article-title":"Unicorn: Runtime provenance-based detector for advanced persistent threats","volume-title":"NDSS","author":"Han","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678916"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2022.3208815"},{"key":"ref27","article-title":"Enriching intrusion alerts through multi-host causality","volume-title":"Proceedings of the Network and Distributed System Security Symposium, NDSS 2005","author":"King","year":"2005"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978378"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICEC.1998.699146"},{"issue":"20","key":"ref30","first-page":"10","article-title":"Graph attention networks","volume":"1050","author":"Velickovic","year":"2017","journal-title":"stat"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539321"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2024\/241"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599546"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939753"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939754"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3482215"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570404"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939754"},{"key":"ref39","article-title":"Mlp-mixer: an all-mlp architecture for vision","volume-title":"Proceedings of the 35th International Conference on Neural Information Processing Systems, ser. NIPS \u201921","author":"Tolstikhin","year":"2024"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00662"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467415"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICMEW59549.2023.00045"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143857"},{"key":"ref44","first-page":"1162","article-title":"Faster cover trees","volume-title":"Proceedings of the 32nd International Conference on International Conference on Machine Learning - Volume 37, ser. ICML\u201915. JMLR.org","author":"Izbicki","year":"2015"},{"key":"ref45","year":"2021","journal-title":"Systemtap"},{"key":"ref46","year":"2021","journal-title":"Transparent computing"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i15.29590"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-023-01181-z"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645407"}],"event":{"name":"2025 IEEE\/ACM International Symposium on Quality of Service (IWQoS)","location":"Gold Coast, Australia","start":{"date-parts":[[2025,7,2]]},"end":{"date-parts":[[2025,7,4]]}},"container-title":["2025 IEEE\/ACM 33rd International Symposium on Quality of Service (IWQoS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11143240\/11143247\/11143256.pdf?arnumber=11143256","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T05:03:19Z","timestamp":1757480599000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11143256\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,2]]},"references-count":49,"URL":"https:\/\/doi.org\/10.1109\/iwqos65803.2025.11143256","relation":{},"subject":[],"published":{"date-parts":[[2025,7,2]]}}}