{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T00:46:14Z","timestamp":1783730774635,"version":"3.55.0"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T00:00:00Z","timestamp":1748736000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Key R&D Program of China","award":["2022YFB3104100"],"award-info":[{"award-number":["2022YFB3104100"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102109"],"award-info":[{"award-number":["62102109"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Major Key Project of PCL","award":["PCL2021A09"],"award-info":[{"award-number":["PCL2021A09"]}]},{"name":"Major Key Project of PCL","award":["PCL2021A02"],"award-info":[{"award-number":["PCL2021A02"]}]},{"name":"Major Key Project of PCL","award":["PCL2022A03"],"award-info":[{"award-number":["PCL2022A03"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2025,6]]},"DOI":"10.1109\/tr.2024.3491894","type":"journal-article","created":{"date-parts":[[2024,12,4]],"date-time":"2024-12-04T19:04:46Z","timestamp":1733339086000},"page":"2640-2654","source":"Crossref","is-referenced-by-count":5,"title":["BiCAM: A Bidirectional Contextualized Attentive Model for Analyzing the Correlation of Heterogeneous Security Events"],"prefix":"10.1109","volume":"74","author":[{"given":"Xi","family":"Luo","sequence":"first","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-2522-3832","authenticated-orcid":false,"given":"Junhui","family":"Wang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8829-4442","authenticated-orcid":false,"given":"Lihua","family":"Yin","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8665-5813","authenticated-orcid":false,"given":"Kaiyan","family":"Zhao","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kexiang","family":"Qian","sequence":"additional","affiliation":[{"name":"School of Information and Communication Engineering, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daojuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Grid Laboratory of Power Cyber-Security Protection and Monitoring Technology, SGRI Power Grid Digitizing Technology Department, State Grid Smart Grid Research Institute Company, Ltd., Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kai","family":"Chen","sequence":"additional","affiliation":[{"name":"State Grid Laboratory of Power Cyber-Security Protection and Monitoring Technology, SGRI Power Grid Digitizing Technology Department, State Grid Smart Grid Research Institute Company, Ltd., Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref2","article-title":"Anticipating the unknownschief information security officer (CISO) benchmark study","volume-title":"Tech. Rep","year":"2019"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref4","first-page":"469","article-title":"Detecting credential spearphishing attacks in enterprise settings","volume-title":"Proc. 26th USENIX Secur.","author":"Ho","year":"2017"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref6","first-page":"4319","article-title":"Generative intrusion detection and prevention on data stream","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Seo","year":"2023"},{"key":"ref7","article-title":"Discerning wheat from chaff in SOCs: A model to identify non-interesting events in security operation centers","author":"Mulders","year":"2022"},{"key":"ref8","first-page":"97","article-title":"Give me structure\u2019: Synthesis and evaluation of a (network) threat analysis process supporting tier 1 investigations in a security operation center","volume-title":"Proc. 19th Symp. Usable Privacy Secur.","author":"Kersten","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-36708-4_62"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3041837"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103583"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2024.3406509"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3605098.3635981"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2024.01.032"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833671"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359800"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.50"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref19","article-title":"Neural machine translation by jointly learning to align and translate","volume-title":"Proc. 3rd Int. Conf. Learn. Representations","author":"Bahdanau","year":"2015"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3474718.3474723"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/BigData52589.2021.9671956"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3390\/app13031977"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.3390\/app13116610"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.12.003"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243829"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2020.24046","article-title":"Unicorn: Runtime provenance-based detector for advanced persistent threats","volume-title":"Proc. 27th Annu. Netw. Distrib. Syst. Secur. Symp.","author":"Han"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24270"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243811"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-022-10381-4"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3168976"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.23919\/MIPRO55190.2022.9803428"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/d14-1179"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref36","article-title":"Empirical evaluation of gated recurrent neural networks on sequence modeling","author":"Chung","year":"2014"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/78.650093"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2005.06.042"},{"key":"ref40","first-page":"315","article-title":"Deep sparse rectifier neural networks","volume-title":"Proc. 14th Int. Conf. Artif. Intell. Statist.","author":"Glorot","year":"2011"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177729694"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629587"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/0169-7439(87)80084-9"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d19-1002"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/24\/11023008\/10777841.pdf?arnumber=10777841","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T17:56:23Z","timestamp":1749059783000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10777841\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6]]},"references-count":45,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tr.2024.3491894","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6]]}}}