{"id":"https://openalex.org/W3096129012","doi":"https://doi.org/10.1016/j.comcom.2020.10.013","title":"RDP-based Lateral Movement detection using Machine Learning","display_name":"RDP-based Lateral Movement detection using Machine Learning","publication_year":2020,"publication_date":"2020-10-28","ids":{"openalex":"https://openalex.org/W3096129012","doi":"https://doi.org/10.1016/j.comcom.2020.10.013","mag":"3096129012"},"language":"en","primary_location":{"id":"doi:10.1016/j.comcom.2020.10.013","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.comcom.2020.10.013","pdf_url":null,"source":{"id":"https://openalex.org/S115004586","display_name":"Computer Communications","issn_l":"0140-3664","issn":["0140-3664","1873-703X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033007169","display_name":"Tim Bai","orcid":null},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Tim Bai","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6090-7988","affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085391652","display_name":"Haibo Bian","orcid":null},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Haibo Bian","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039801401","display_name":"Mohammad A. Salahuddin","orcid":"https://orcid.org/0000-0002-5431-3278"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad A. Salahuddin","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054077020","display_name":"Abbas Abou Daya","orcid":"https://orcid.org/0000-0003-4994-8559"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abbas Abou Daya","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062253146","display_name":"Noura Limam","orcid":"https://orcid.org/0000-0002-7759-3751"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Noura Limam","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038723583","display_name":"Raouf Boutaba","orcid":"https://orcid.org/0000-0001-7936-6862"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Raouf Boutaba","raw_affiliation_strings":["David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"David R. Cheriton School of Computer Science, University of Waterloo, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5062253146"],"corresponding_institution_ids":["https://openalex.org/I151746483"],"apc_list":{"value":2300,"currency":"USD","value_usd":2300},"apc_paid":null,"fwci":2.0118,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":{"value":0.87322048,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"165","issue":null,"first_page":"9","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8989163637161255},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.7801620960235596},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6109254956245422},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5998793840408325},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5605324506759644},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.503816545009613},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4886239171028137},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4334682822227478},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43073445558547974},{"id":"https://openalex.org/keywords/bootstrapping","display_name":"Bootstrapping (finance)","score":0.4284267723560333},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4116082787513733},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4072132408618927},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.11082428693771362}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8989163637161255},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.7801620960235596},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6109254956245422},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5998793840408325},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5605324506759644},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.503816545009613},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4886239171028137},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4334682822227478},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43073445558547974},{"id":"https://openalex.org/C207609745","wikidata":"https://www.wikidata.org/wiki/Q4944086","display_name":"Bootstrapping (finance)","level":2,"score":0.4284267723560333},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4116082787513733},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4072132408618927},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.11082428693771362},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C106159729","wikidata":"https://www.wikidata.org/wiki/Q2294553","display_name":"Financial economics","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.comcom.2020.10.013","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.comcom.2020.10.013","pdf_url":null,"source":{"id":"https://openalex.org/S115004586","display_name":"Computer Communications","issn_l":"0140-3664","issn":["0140-3664","1873-703X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Communications","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6100000143051147,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G3134926896","display_name":null,"funder_award_id":"530335","funder_id":"https://openalex.org/F4320321487","funder_display_name":"Canadian Network for Research and Innovation in Machining Technology, Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320313506","display_name":"Royal Bank of Canada","ror":"https://ror.org/03hgnwx26"},{"id":"https://openalex.org/F4320321487","display_name":"Canadian Network for Research and Innovation in Machining Technology, Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1226496485","https://openalex.org/W1583666277","https://openalex.org/W1930624869","https://openalex.org/W1985663105","https://openalex.org/W2018061979","https://openalex.org/W2024046085","https://openalex.org/W2065323196","https://openalex.org/W2066832805","https://openalex.org/W2070375960","https://openalex.org/W2077488147","https://openalex.org/W2093331366","https://openalex.org/W2095577883","https://openalex.org/W2101109743","https://openalex.org/W2101234009","https://openalex.org/W2116992865","https://openalex.org/W2125908420","https://openalex.org/W2151298633","https://openalex.org/W2167240430","https://openalex.org/W2308766372","https://openalex.org/W2330820318","https://openalex.org/W2342249984","https://openalex.org/W2342850280","https://openalex.org/W2408793237","https://openalex.org/W2528321558","https://openalex.org/W2531370029","https://openalex.org/W2556800116","https://openalex.org/W2612690371","https://openalex.org/W2738046073","https://openalex.org/W2746170296","https://openalex.org/W2765664114","https://openalex.org/W2768348081","https://openalex.org/W2774510177","https://openalex.org/W2783034914","https://openalex.org/W2798421174","https://openalex.org/W2799375682","https://openalex.org/W2804964061","https://openalex.org/W2809684781","https://openalex.org/W2890352274","https://openalex.org/W2902314211","https://openalex.org/W2915130643","https://openalex.org/W2962703433","https://openalex.org/W3005347330","https://openalex.org/W4233977980","https://openalex.org/W4238969497","https://openalex.org/W4241511027","https://openalex.org/W4285719527","https://openalex.org/W4301377663","https://openalex.org/W4302357592","https://openalex.org/W6603743114","https://openalex.org/W6640462745","https://openalex.org/W6674592523","https://openalex.org/W6675354045","https://openalex.org/W6677571401","https://openalex.org/W6682363673","https://openalex.org/W6729854918","https://openalex.org/W6742677704","https://openalex.org/W6745609711","https://openalex.org/W6755539112","https://openalex.org/W6756570547"],"related_works":["https://openalex.org/W2389256677","https://openalex.org/W2013502867","https://openalex.org/W2353766896","https://openalex.org/W1986630940","https://openalex.org/W1859642347","https://openalex.org/W2123415650","https://openalex.org/W4387081478","https://openalex.org/W1806141658","https://openalex.org/W2071043234","https://openalex.org/W2521221128"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}