Event Detection with Convolutional Neural Networks for Forensic Investigation. - Bo Yang; Ning Li; Zhigang Lu 002; Jianguo Jiang (IIP, 2016)

Retweet Prediction Using Social-Aware Probabilistic Matrix Factorization. - Bo Jiang 013; Zhigang Lu 002; Ning Li; Jianjun Wu 004; Zhengwei Jiang (ICCS (1), 2018)

A Novel Approach for Identifying Lateral Movement Attacks Based on Network Embedding. - Mingyi Chen; Yepeng Yao; Junrong Liu; Bo Jiang 013; Liya Su; Zhigang Lu 002 (ISPA/IUCC/BDCloud/SocialCom/SustainCom, 2018)

DeepGFL: Deep Feature Learning via Graph for Attack Detection on Flow-Based Network Traffic. - Yepeng Yao; Liya Su; Zhigang Lu 002 (MILCOM, 2018)

Hierarchical Clustering Based Network Traffic Data Reduction for Improving Suspicious Flow Detection. - Liya Su; Yepeng Yao; Ning Li; Junrong Liu; Zhigang Lu 002; Baoxu Liu (TrustCom/BigDataSE, 2018)

基于威胁情报平台的恶意URL检测研究 (Study on Malicious URL Detection Based on Threat Intelligence Platform). - Xin Wang; Yang Wu; Zhigang Lu 002 (计算机科学, 2018)

Identifying Truly Suspicious Events and False Alarms Based on Alert Graph. - Tian Wang; Chen Zhang; Zhigang Lu 002; Dan Du; Yaopeng Han (IEEE BigData, 2019)

Retweeting Prediction Using Matrix Factorization with Binomial Distribution and Contextual Information. - Bo Jiang 013; Zhigang Lu 002; Ning Li; Jianjun Wu 004; Feng Yi; Dongxu Han (DASFAA (2), 2019)

A Session-Packets-Based Encrypted Traffic Classification Using Capsule Neural Networks. - Susu Cui; Bo Jiang 013; Zhenzhen Cai; Zhigang Lu 002; Song Liu; Jian Liu (HPCC/SmartCity/DSS, 2019)

Mention Recommendation with Context-Aware Probabilistic Matrix Factorization. - Bo Jiang 013; Zhigang Lu 002; Ning Li; Zelin Cui (ICCS (2), 2019)

Marrying Graph Kernel with Deep Neural Network: A Case Study for Network Anomaly Detection. - Yepeng Yao; Liya Su; Chen Zhang; Zhigang Lu 002; Baoxu Liu (ICCS (2), 2019)

isAnon: Flow-Based Anonymity Network Traffic Identification Using Extreme Gradient Boosting. - Zhenzhen Cai; Bo Jiang 013; Zhigang Lu 002; Junrong Liu; Pingchuan Ma 005 (IJCNN, 2019)

PRTIRG: A Knowledge Graph for People-Readable Threat Intelligence Recommendation. - Ming Du; Jun Jiang; Zhengwei Jiang; Zhigang Lu 002; Xiangyu Du (KSEM (1), 2019)

Retweet Prediction Using Context-Aware Coupled Matrix-Tensor Factorization. - Bo Jiang 013; Feng Yi; Jianjun Wu 004; Zhigang Lu 002 (KSEM (1), 2019)

Understanding the Influence of Graph Kernels on Deep Learning Architecture: A Case Study of Flow-Based Network Attack Detection. - Liya Su; Yepeng Yao; Zhigang Lu 002; Baoxu Liu (TrustCom/BigDataSE, 2019)

STDeepGraph: Spatial-Temporal Deep Learning on Communication Graphs for Long-Term Network Attack Detection. - Yepeng Yao; Liya Su; Zhigang Lu 002; Baoxu Liu (TrustCom/BigDataSE, 2019)

Social Recommendation in Heterogeneous Evolving Relation Network. - Bo Jiang 013; Zhigang Lu 002; Yuling Liu; Ning Li; Zelin Cui (ICCS (1), 2020)

Malicious Domain Detection Based on K-means and SMOTE. - Qing Wang 041; Linyu Li 004; Bo Jiang 013; Zhigang Lu 002; Junrong Liu; Shijie Jian (ICCS (2), 2020)

MTLAT: A Multi-Task Learning Framework Based on Adversarial Training for Chinese Cybersecurity NER. - Yaopeng Han; Zhigang Lu 002; Bo Jiang 013; Yuling Liu; Chen Zhang; Zhengwei Jiang; Ning Li (NPC, 2020)

STIDM: A Spatial and Temporal Aware Intrusion Detection Model. - Xueying Han; Rongchao Yin; Zhigang Lu 002; Bo Jiang 013; Yuling Liu; Song Liu; Chonghua Wang; Ning Li (TrustCom, 2020)

CETAnalytics: Comprehensive effective traffic information analytics for encrypted traffic classification. - Cong Dong; Chen Zhang; Zhigang Lu 002; Baoxu Liu; Bo Jiang 013 (Comput. Networks, 2020)

MBTree: Detecting Encryption RAT Communication Using Malicious Behavior Tree. - Cong Dong; Zhigang Lu 002; Yufan Chen; Zelin Cui; Baoxu Liu (CoRR, 2020)

THS-IDPC: A three-stage hierarchical sampling method based on improved density peaks clustering algorithm for encrypted malicious traffic detection. - Liangchen Chen; Shu Gao; Baoxu Liu; Zhigang Lu 002; Zhengwei Jiang (J. Supercomput., 2020)

WP-GBDT: An Approach for Winner Prediction using Gradient Boosting Decision Tree. - Haitao Xiao; Yuling Liu; Dan Du; Zhigang Lu 002 (IEEE BigData, 2021)

BEDIM: Lateral Movement Detection In Enterprise Network Through Behavior Deviation Measurement. - Cong Dong; Yufan Chen; Yunjian Zhang; Yuling Liu; Zhigang Lu 002; Pu Dong; Baoxu Liu (HPCC/DSS/SmartCity/DependSys, 2021)

Caps-LSTM: A Novel Hierarchical Encrypted VPN Network Traffic Identification Using CapsNet and LSTM. - Jiyue Tang; Le Yang; Song Liu; Wenmao Liu; Meng Wang; Chonghua Wang; Bo Jiang 013; Zhigang Lu 002 (SciSec, 2021)

MBTree: Detecting Encryption RATs Communication Using Malicious Behavior Tree. - Cong Dong; Zhigang Lu 002; Zelin Cui; Baoxu Liu; Kai Chen 012 (IEEE Trans. Inf. Forensics Secur., 2021)

An Approach for Predicting the Costs of Forwarding Contracts using Gradient Boosting. - Haitao Xiao; Yuling Liu; Dan Du; Zhigang Lu 002 (FedCSIS, 2022)

IV-IDM: Reliable Intrusion Detection Method based on Involution and Voting. - Xueying Han; Pu Dong; Song Liu; Bo Jiang 013; Zhigang Lu 002; Zelin Cui (ICC, 2022)

CapsITD: Malicious Insider Threat Detection Based on Capsule Neural Network. - Haitao Xiao; Chen Zhang; Song Liu; Bo Jiang 013; Zhigang Lu 002; Fei Wang 014; Yuling Liu (SecureComm, 2022)

Blockchain abnormal behavior awareness methods: a survey. - Chuyi Yan; Chen Zhang; Zhigang Lu 002; Zehui Wang; Yuling Liu; Baoxu Liu (Cybersecur., 2022)

Only Header: a reliable encrypted traffic classification framework without privacy risk. - Susu Cui; Jian Liu; Cong Dong; Zhigang Lu 002; Dan Du (Soft Comput., 2022)

TAElog: A Novel Transformer AutoEncoder-Based Log Anomaly Detection Method. - Changzhi Zhao; Kezhen Huang; Di Wu; Xueying Han; Dan Du; Yutian Zhou; Zhigang Lu 002; Yuling Liu (Inscrypt (2), 2023)

HLMD: Detecting Lateral Movement Using Heterogeneous Graph Model. - Yiru Gong; Xueying Han; Dan Du; Xichen Du; Bo Jiang 013; Tian Tian; Zhigang Lu 002 (HPCC/DSS/SmartCity/DependSys, 2023)

Few-Shot Network Traffic Anomaly Detection Based on Siamese Neural Network. - Simin Xu; Xueying Han; Tian Tian; Bo Jiang 013; Zhigang Lu 002; Chen Zhang (ICC, 2023)

A Fast Gradient Boosting Based Approach for Predicting Frags in Tactic Games. - Haitao Xiao; Jinzhong Yang; Yuling Liu; Junrong Liu; Dan Du; Zhigang Lu 002 (ICME Workshops, 2023)

Insider Threat Detection Based On Heterogeneous Graph Neural Network. - Tian Tian; Yiru Gong; Bo Jiang 013; Junrong Liu; Huamin Feng; Zhigang Lu 002 (TrustCom, 2023)

C-BEDIM and S-BEDIM: Lateral movement detection in enterprise network through behavior deviation measurement. - Cong Dong; Jiahai Yang; Song Liu; Zhi Wang 018; Yuling Liu; Zhigang Lu 002 (Comput. Secur., 2023)

HANDOM: Heterogeneous Attention Network Model for Malicious Domain Detection. - Qing Wang 041; Cong Dong; Shijie Jian; Dan Du; Zhigang Lu 002; Yinhao Qi; Dongxu Han; Xiaobo Ma; Fei Wang 014; Yuling Liu (Comput. Secur., 2023)

CBSeq: A Channel-Level Behavior Sequence for Encrypted Malware Traffic Detection. - Susu Cui; Cong Dong; Meng Shen 001; Yuling Liu; Bo Jiang 013; Zhigang Lu 002 (IEEE Trans. Inf. Forensics Secur., 2023)

Network intrusion detection based on n-gram frequency and time-aware transformer. - Xueying Han; Susu Cui; Song Liu; Chen Zhang; Bo Jiang 013; Zhigang Lu 002 (Comput. Secur., 2023)

Aparecium: understanding and detecting scam behaviors on Ethereum via biased random walk. - Chuyi Yan; Chen Zhang; Meng Shen 001; Ning Li; Jinhao Liu; Yinhao Qi; Zhigang Lu 002; Yuling Liu (Cybersecur., 2023)

HBGraph: a Host Behavior Graph Model for C&C Traffic Detection. - Yitan Huang; Jian Qin; Zelin Cui; Ning Li; Bo Jiang 013; Zhigang Lu 002 (CSCWD, 2024)

Deep Dive into Insider Threats: Malicious Activity Detection within Enterprise. - Haitao Xiao; Dan Du; Junrong Liu; Song Liu; Yan Zhu; Yuling Liu; Zhigang Lu 002 (CSCWD, 2024)

LSTM-Diff: A Data Generation Method for Imbalanced Insider Threat Detection. - Tian Tian; Yan Zhu; Ning An; Bo Jiang 013; Huamin Feng; Zhigang Lu 002 (TrustCom, 2024)

ContraMTD: An Unsupervised Malicious Network Traffic Detection Method based on Contrastive Learning. - Xueying Han; Susu Cui; Jian Qin; Song Liu; Bo Jiang 013; Cong Dong; Zhigang Lu 002; Baoxu Liu (WWW, 2024)

Graph-based insider threat detection: A survey. - Yiru Gong; Susu Cui; Song Liu; Bo Jiang 013; Cong Dong; Zhigang Lu 002 (Comput. Networks, 2024)

A survey of large language models for cyber threat detection. - Yiren Chen; Mengjiao Cui; Ding Wang; Yiyang Cao; Peian Yang; Bo Jiang 013; Zhigang Lu 002; Baoxu Liu (Comput. Secur., 2024)

FG-SAT: Efficient Flow Graph for Encrypted Traffic Classification under Environment Shifts. - Susu Cui; Xueying Han; Dongqi Han; Zhiliang Wang; Weihang Wang 006; Yun Li; Bo Jiang 013; Baoxu Liu; Zhigang Lu 002 (CoRR, 2024)

Winemaking: Extracting Essential Insights for Efficient Threat Detection in Audit Logs. - Weiheng Wu; Wei Qiao; Wenhao Yan; Bo Jiang 013; Yuling Liu; Baoxu Liu; Zhigang Lu 002; Junrong Liu (CoRR, 2024)

MVDet: Encrypted malware traffic detection via multi-view analysis. - Susu Cui; Xueying Han; Cong Dong; Yun Li; Song Liu; Zhigang Lu 002; Yuling Liu (J. Comput. Secur., 2024)

ECNet: Robust Malicious Network Traffic Detection With Multi-View Feature and Confidence Mechanism. - Xueying Han; Song Liu; Junrong Liu; Bo Jiang 013; Zhigang Lu 002; Baoxu Liu (IEEE Trans. Inf. Forensics Secur., 2024)

Unveiling encrypted traffic types through hierarchical network characteristics. - Yufan Chen; Jiahai Yang; Susu Cui; Cong Dong; Bo Jiang 013; Yuling Liu; Zhigang Lu 002 (Comput. Secur., 2024)

Unveiling shadows: A comprehensive framework for insider threat detection based on statistical and sequential analysis. - Haitao Xiao; Yan Zhu; Bin Zhang; Zhigang Lu 002; Dan Du; Yuling Liu (Comput. Secur., 2024)

ProcSAGE: an efficient host threat detection method based on graph representation learning. - Boyuan Xu; Yiru Gong; Xiaoyu Geng; Yun Li; Cong Dong; Song Liu; Yuling Liu; Bo Jiang 013; Zhigang Lu 002 (Cybersecur., 2024)

Phishing behavior detection on different blockchains via adversarial domain adaptation. - Chuyi Yan; Xueying Han; Yan Zhu; Dan Du; Zhigang Lu 002; Yuling Liu (Cybersecur., 2024)

Cross Page Recognition Methods for Encrypted Web Application Fingerprinting. - Zelin Cui; Pu Dong; Dongxu Han; Bo Jiang 013; Zhigang Lu 002; Huamin Feng (CSCWD, 2025)

Dynamic Behavior-Based Detection Techniques for Encrypted Variant Webshells. - Zelin Cui; Ning Li; Pu Dong; Mengchuan Shang; Bo Jiang 013; Zhigang Lu 002; Huamin Feng (CSCWD, 2025)

SiamEHGT: An Evolving Heterogeneous Graph Transformer for Insider Threat Detection based on Siamese Architecture. - Yinhao Qi; Ning An; Zehui Wang; Yuan Yao; Chen Zhang; Yan Zhu; Zhigang Lu 002 (CSCWD, 2025)

Autumn: An Unsupervised APT Detection via Detailed Process-Level Analysis. - Zehui Wang; Yunxiang Wang; Wenhao Yan; Yinhao Qi; Tian Tian; Bo Jiang 013; Zhigang Lu 002 (CSCWD, 2025)

DCASI: A Sequence-based Attack Investigation Method Using DTW Contrastive Learning. - Yun Li; Wei Qiao; Yan Zhu; Yunxiang Wang; Bo Jiang 013; Zhigang Lu 002 (ICASSP, 2025)

Brewing Vodka: Distilling Pure Knowledge for Lightweight Threat Detection in Audit Logs. - Weiheng Wu; Wei Qiao; Wenhao Yan; Bo Jiang 013; Yuling Liu; Baoxu Liu; Zhigang Lu 002; Junrong Liu (WWW, 2025)

Towards effective black-box attacks on DoH tunnel detection systems. - Linghao Li; Yan Zhu; Yun Li; Wei Qiao; Zelin Cui; Susu Cui; Bo Jiang 013; Zhigang Lu 002 (Comput. Networks, 2025)

ATHITD: Attention-based temporal heterogeneous graph neural network for insider threat detection. - Yinhao Qi; Chuyi Yan; Zehui Wang; Chen Zhang; Song Liu; Zhigang Lu 002; Bo Jiang 013 (Comput. Secur., 2025)

PathWatcher: A path-based behavior detection method for attack detection and investigation. - Zehui Wang; Hao Li; Yinhao Qi; Wei Qiao; Song Liu; Chen Zhang; Bo Jiang 013; Zhigang Lu 002 (Comput. Secur., 2025)

FG-SAT: Efficient Flow Graph for Encrypted Traffic Classification Under Environment Shifts. - Susu Cui; Xueying Han; Dongqi Han; Zhiliang Wang; Weihang Wang 006; Bo Jiang 013; Baoxu Liu; Zhigang Lu 002 (IEEE Trans. Inf. Forensics Secur., 2025)

Sentient: Multi-Scenario Behavioral Intent Analysis for Advanced Persistent Threat Detection. - Wenhao Yan; Ning An; Wei Qiao; Weiheng Wu; Bo Jiang 013; Yuling Liu; Zhigang Lu 002; Junrong Liu (CoRR, 2025)

Language of Network: A Generative Pre-trained Model for Encrypted Traffic Comprehension. - Di Zhao; Bo Jiang 013; Song Liu; Susu Cui; Meng Shen 001; Dongqi Han; Xingmao Guan; Zhigang Lu 002 (CoRR, 2025)

Insider threat detection for specific threat scenarios. - Tian Tian; Chen Zhang; Bo Jiang 013; Huamin Feng; Zhigang Lu 002 (Cybersecur., 2025)