{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T05:52:46Z","timestamp":1773467566161,"version":"3.50.1"},"reference-count":69,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Centers of Academic Excellence in Cybersecurity","award":["H98230-22-1-0300"],"award-info":[{"award-number":["H98230-22-1-0300"]}]},{"name":"National Security Agency and ONR","award":["N00014-23-1-2132"],"award-info":[{"award-number":["N00014-23-1-2132"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Big Data"],"published-print":{"date-parts":[[2026,4]]},"DOI":"10.1109\/tbdata.2025.3621145","type":"journal-article","created":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T17:57:54Z","timestamp":1760983074000},"page":"376-388","source":"Crossref","is-referenced-by-count":0,"title":["CAPTOR: Cyber Attack Protection via Temporal Online Graph Representation Learning"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-8234-4389","authenticated-orcid":false,"given":"Bishal","family":"Lakha","sequence":"first","affiliation":[{"name":"Boise State University, Boise, ID, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9533-5599","authenticated-orcid":false,"given":"Janet","family":"Layne","sequence":"additional","affiliation":[{"name":"Boise State University, Boise, ID, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0689-5063","authenticated-orcid":false,"given":"Edoardo","family":"Serra","sequence":"additional","affiliation":[{"name":"Boise State University, Boise, ID, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7052-1114","authenticated-orcid":false,"given":"Francesco","family":"Gullo","sequence":"additional","affiliation":[{"name":"University of L’Aquila, L’Aquila, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3210-558X","authenticated-orcid":false,"given":"Sushil","family":"Jajodia","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1089\/big.2020.0263"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2019.105124"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463573"},{"key":"ref4","article-title":"Operationally transparent cyber (OpTC)","author":"Arantes","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3616855.3635834"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3275789"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467159"},{"issue":"1","key":"ref8","first-page":"579","article-title":"Network-based intrusion detection using neural networks","volume":"12","author":"Bivens","year":"2002","journal-title":"Intell. Eng. Syst. Artif. Neural Netw."},{"key":"ref9","first-page":"108","article-title":"API design for machine learning software: Experiences from the scikit-learn project","volume-title":"Proc. ECML\/PKDD Workshop Lang. Data Mining Mach. Learn.","author":"Buitinck","year":"2013"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3481955"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330925"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3448016.3452766"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3385321"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-023-00624-6"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467137"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00309"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00024"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14778\/3352063.3352070"},{"key":"ref19","article-title":"Recurrent neural networks and long short-term memory networks: Tutorial and survey","author":"Ghojogh","year":"2023"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.3390\/s22093166"},{"key":"ref21","article-title":"End-to-end anomaly detection for identifying malicious cyber behavior through NLP-based log embeddings","author":"Golczynski","year":"2021"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534113"},{"key":"ref23","volume-title":"Graph Representation Learning, Ser. Synthesis Lectures on Artificial Intelligence and Machine Learning","author":"Hamilton","year":"2020"},{"key":"ref24","first-page":"3","article-title":"Provenance-based intrusion detection: Opportunities and challenges","volume-title":"Proc. USENIX Workshop Theory Pract. Provenance","author":"Han","year":"2018"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2959131"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3318960"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9413523"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3450315"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2018.8355327"},{"key":"ref30","first-page":"70:1","article-title":"Representation learning for dynamic graphs: A survey","volume":"21","author":"Kazemi","year":"2020","journal-title":"J. Mach. Learn. Res."},{"key":"ref31","volume-title":"Comprehensive, Multi-Source Cyber-Security Events","author":"Kent","year":"2015"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.33851\/jmis.2019.6.4.165"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24107"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10020336"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2019.00187"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.14778\/3598581.3598583"},{"key":"ref37","article-title":"Inferential SIR-GN: Scalable graph representation learning","author":"Layne","year":"2021"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2009.5178592"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3390\/app9204396"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS54207.2022.9789878"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3118815"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(13)70119-3"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/IBDAP62940.2024.10689688"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2997327"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00148"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.23919\/SOFTCOM.2019.8903799"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.5555\/3454287.3455008"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS54207.2022.9789921"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/mis.2026.3650817"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3543146.3543171"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00139"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3397191"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-94"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref56","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-031-41463-3","volume-title":"Introduction to Cybersecurity - A Multidisciplinary Challenge","author":"Sharp","year":"2024"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3597464"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-9700-8_7"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-90775-8_10"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2023.03.008"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3208815"},{"issue":"9","key":"ref62","first-page":"12","article-title":"The reduction of a graph to canonical form and the algebra which appears therein","volume":"2","author":"Weisfeiler","year":"1968","journal-title":"Nauchno-Technicheskaya Informatsia"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3182333"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2867595"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00012"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3116612"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.23919\/DATE58400.2024.10546572"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2022.3159264"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3539605"}],"container-title":["IEEE Transactions on Big Data"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6687317\/11433832\/11208532.pdf?arnumber=11208532","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T04:59:38Z","timestamp":1773464378000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11208532\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4]]},"references-count":69,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tbdata.2025.3621145","relation":{},"ISSN":["2332-7790","2372-2096"],"issn-type":[{"value":"2332-7790","type":"electronic"},{"value":"2372-2096","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,4]]}}}