{"id":"https://openalex.org/W4405987743","doi":"https://doi.org/10.1016/j.cose.2024.104303","title":"A multi-source log semantic analysis-based attack investigation approach","display_name":"A multi-source log semantic analysis-based attack investigation approach","publication_year":2025,"publication_date":"2025-01-02","ids":{"openalex":"https://openalex.org/W4405987743","doi":"https://doi.org/10.1016/j.cose.2024.104303"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2024.104303","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.104303","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115742920","display_name":"Yubo Song","orcid":null},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yubo Song","raw_affiliation_strings":["Purple Mountain Laboratories, Nanjing, China","School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115742921","display_name":"Kanghui Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kanghui Wang","raw_affiliation_strings":["Purple Mountain Laboratories, Nanjing, China","School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101081574","display_name":"Xin Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xin Sun","raw_affiliation_strings":["State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075889321","display_name":"Zhongyuan Qin","orcid":"https://orcid.org/0000-0002-7887-7203"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongyuan Qin","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-7887-7203","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115742922","display_name":"Hua Dai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hua Dai","raw_affiliation_strings":["State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115742923","display_name":"Weiwei Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiwei Chen","raw_affiliation_strings":["Purple Mountain Laboratories, Nanjing, China","School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115742924","display_name":"Bang Lv","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bang Lv","raw_affiliation_strings":["State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Grid Zhejiang Electric Power Co., Ltd. Research Institute, Hangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115742925","display_name":"Jiaqi Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaqi Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0003-8640-0645","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5115742920"],"corresponding_institution_ids":["https://openalex.org/I4210155350","https://openalex.org/I76569877"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":null,"fwci":8.11,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.9691953,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"150","issue":null,"first_page":"104303","last_page":"104303"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7967288494110107},{"id":"https://openalex.org/keywords/semantic-analysis","display_name":"Semantic analysis (machine learning)","score":0.5038201212882996},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.36035647988319397}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7967288494110107},{"id":"https://openalex.org/C2777946921","wikidata":"https://www.wikidata.org/wiki/Q7449044","display_name":"Semantic analysis (machine learning)","level":2,"score":0.5038201212882996},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.36035647988319397}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2024.104303","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.104303","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W295894637","https://openalex.org/W1444906800","https://openalex.org/W1539567219","https://openalex.org/W2009232481","https://openalex.org/W2127426251","https://openalex.org/W2397699236","https://openalex.org/W2532844970","https://openalex.org/W2737925311","https://openalex.org/W2771963642","https://openalex.org/W2792581684","https://openalex.org/W2883730939","https://openalex.org/W2885157095","https://openalex.org/W2886539179","https://openalex.org/W2889727957","https://openalex.org/W2906943923","https://openalex.org/W2948359422","https://openalex.org/W2964321699","https://openalex.org/W2980786351","https://openalex.org/W2981963339","https://openalex.org/W3006711782","https://openalex.org/W3008508243","https://openalex.org/W3021196172","https://openalex.org/W3080678972","https://openalex.org/W3105780912","https://openalex.org/W3113693716","https://openalex.org/W3152911549","https://openalex.org/W3196866993","https://openalex.org/W4242556421","https://openalex.org/W4353004773","https://openalex.org/W4391655576","https://openalex.org/W4392357737","https://openalex.org/W4396716665","https://openalex.org/W6606869816","https://openalex.org/W6635714930","https://openalex.org/W6678846912","https://openalex.org/W6679775712","https://openalex.org/W6712595259","https://openalex.org/W6720006811","https://openalex.org/W6721604634","https://openalex.org/W6752918806","https://openalex.org/W6794292927","https://openalex.org/W6802832575","https://openalex.org/W6807617276","https://openalex.org/W6840774871","https://openalex.org/W6849303389","https://openalex.org/W6854652621","https://openalex.org/W6855397463","https://openalex.org/W6872023706"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2138077373"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-02-03T00:53:05.648605","created_date":"2025-10-10T00:00:00"}