{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T08:41:39Z","timestamp":1776847299326,"version":"3.51.2"},"reference-count":28,"publisher":"World Scientific Pub Co Pte Ltd","issue":"07","funder":[{"name":"2025 Xinjiang Internet Information Science and Technology Innovation","award":["12521608"],"award-info":[{"award-number":["12521608"]}]},{"name":"Industry-Education Integration and New Business Development Research Center","award":["2025-KYJD07"],"award-info":[{"award-number":["2025-KYJD07"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Int. J. Patt. Recogn. Artif. Intell."],"published-print":{"date-parts":[[2026,6,15]]},"abstract":"<jats:p>Addressing the challenges of detection and attribution posed by the concealment and dynamic evolutionary traits of Advanced Persistent Threats (APTs), this paper proposes an intelligent detection and attribution method integrating Graph Neural Networks (GNNs) with dynamic community features. Initially, multi-source datasets undergo cleansing, feature extraction, and the construction of temporal graph sequences. Dynamic attack communities are modeled using a Temporal Attention Graph Neural Network (TA-GNN) to capture abrupt structural shifts within communities across various attack stages. A tri-dimensional feature framework encompassing \u201ccommunity behavior-traffic statistics-GNN embeddings\u201d is established, enhanced by semi-supervised contrastive learning to bolster the identification capability for unknown attacks. Finally, an improved Temporal-aware Taint Propagation Algorithm (TTPA) is employed for attack chain reconstruction. Experimental results demonstrate that the proposed method achieves an F1-score approximately 15% higher than traditional approaches, an attack path identification accuracy of 92%, and an average attribution time of 4.2[Formula: see text]s, thereby providing robust support for APT defense.<\/jats:p>","DOI":"10.1142\/s0218001425570289","type":"journal-article","created":{"date-parts":[[2025,12,10]],"date-time":"2025-12-10T05:57:52Z","timestamp":1765346272000},"source":"Crossref","is-referenced-by-count":0,"title":["Integrating Graph Neural Networks and Dynamic Community Characterization for Advanced Persistent Threat Detection and Attack Provenance Reconstruction"],"prefix":"10.1142","volume":"40","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7945-1212","authenticated-orcid":false,"given":"Yingchao","family":"Wang","sequence":"first","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0586-8705","authenticated-orcid":false,"given":"Na","family":"Li","sequence":"additional","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4253-8043","authenticated-orcid":false,"given":"Dechuan","family":"Qiu","sequence":"additional","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-8892-5385","authenticated-orcid":false,"given":"Bingyu","family":"Cao","sequence":"additional","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-0872-3223","authenticated-orcid":false,"given":"Huaxing","family":"Xiao","sequence":"additional","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9182-8086","authenticated-orcid":false,"given":"Peng","family":"Zhou","sequence":"additional","affiliation":[{"name":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"219","published-online":{"date-parts":[[2026,3,20]]},"reference":[{"issue":"4","key":"S0218001425570289BIB001","first-page":"531","volume":"15","author":"Bian Y.","year":"2017","journal-title":"IEEE Trans. Dependable and Secure Computing"},{"key":"S0218001425570289BIB002","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/2008\/10\/P10008"},{"key":"S0218001425570289BIB003","first-page":"165755","volume":"7","author":"Chen X.","year":"2019","journal-title":"IEEE Access"},{"key":"S0218001425570289BIB004","first-page":"103412","volume":"138","author":"Dong C.","year":"2024","journal-title":"Comput. Secur."},{"issue":"3","key":"S0218001425570289BIB005","first-page":"1636","volume":"19","author":"Fang Y.","year":"2021","journal-title":"IEEE Trans. Dependable and Secure Computing"},{"key":"S0218001425570289BIB006","first-page":"1035","volume-title":"Proc. 2017 ACM SIGKDD Int. Conf. Knowledge Discovery and Data Mining","author":"Hasan M.","year":"2017"},{"key":"S0218001425570289BIB007","first-page":"639","volume-title":"Proc. 24th USENIX Conf. Security Symposium","author":"Hossain M. S.","year":"2015"},{"key":"S0218001425570289BIB008","first-page":"427","volume-title":"Proc. 2012 ACM Conf. Computer and Communications Security","author":"Hu H.","year":"2012"},{"issue":"2","key":"S0218001425570289BIB009","first-page":"336","volume":"45","author":"Huang S.","year":"2023","journal-title":"Chinese J. Geotechnical Engineering"},{"key":"S0218001425570289BIB010","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12204362"},{"key":"S0218001425570289BIB011","doi-asserted-by":"publisher","DOI":"10.1002\/adfm.202423566"},{"key":"S0218001425570289BIB012","first-page":"1003","volume-title":"Proc. 2014 ACM SIGSAC Conf. Computer and Communications Security","author":"Li Y.","year":"2014"},{"key":"S0218001425570289BIB013","first-page":"103345","volume":"135","author":"Li M.","year":"2024","journal-title":"Comput. Secur."},{"key":"S0218001425570289BIB014","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2025.104588"},{"issue":"7","key":"S0218001425570289BIB015","first-page":"1444","volume":"44","author":"Liu C.","year":"2021","journal-title":"Chinese J. Computers"},{"key":"S0218001425570289BIB016","author":"Lu B.","year":"2025","journal-title":"J. Agricultural and Food Chemistry"},{"key":"S0218001425570289BIB017","doi-asserted-by":"publisher","DOI":"10.1167\/iovs.66.11.57"},{"issue":"2","key":"S0218001425570289BIB018","first-page":"1","volume":"8","author":"National Cybersecurity Emergency Response Center","year":"2023","journal-title":"J. Information Security"},{"issue":"5","key":"S0218001425570289BIB019","first-page":"25","author":"Qi Anxin Team","year":"2023","journal-title":"Cybersecurity Technology & Application"},{"issue":"11","key":"S0218001425570289BIB020","first-page":"2378","volume":"57","author":"Shao K. P.","year":"2020","journal-title":"J. Computer Research and Development"},{"key":"S0218001425570289BIB021","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-019-41695-z"},{"key":"S0218001425570289BIB022","first-page":"2890","volume":"18","author":"Wang Q.","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"26","key":"S0218001425570289BIB023","first-page":"1","volume":"37","author":"Xuan D. C.","year":"2025","journal-title":"Neural Computing and Applications"},{"key":"S0218001425570289BIB024","doi-asserted-by":"publisher","DOI":"10.3390\/app15137597"},{"key":"S0218001425570289BIB025","doi-asserted-by":"publisher","DOI":"10.1186\/s12885-025-14610-1"},{"key":"S0218001425570289BIB026","first-page":"4567","volume":"18","author":"Zhang Y.","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"1","key":"S0218001425570289BIB027","first-page":"278","volume":"33","author":"Zhang W.","year":"2022","journal-title":"J. Software"},{"key":"S0218001425570289BIB028","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2025.104580"}],"container-title":["International Journal of Pattern Recognition and Artificial Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.worldscientific.com\/doi\/pdf\/10.1142\/S0218001425570289","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T07:44:57Z","timestamp":1776843897000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.worldscientific.com\/doi\/10.1142\/S0218001425570289"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,20]]},"references-count":28,"journal-issue":{"issue":"07","published-print":{"date-parts":[[2026,6,15]]}},"alternative-id":["10.1142\/S0218001425570289"],"URL":"https:\/\/doi.org\/10.1142\/s0218001425570289","relation":{},"ISSN":["0218-0014","1793-6381"],"issn-type":[{"value":"0218-0014","type":"print"},{"value":"1793-6381","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,20]]},"article-number":"2557028"}}