{"id":"https://openalex.org/W2991149580","doi":"https://doi.org/10.1109/hpec.2019.8916559","title":"Combining Tensor Decompositions and Graph Analytics to Provide Cyber Situational Awareness at HPC Scale","display_name":"Combining Tensor Decompositions and Graph Analytics to Provide Cyber Situational Awareness at HPC Scale","publication_year":2019,"publication_date":"2019-09-01","ids":{"openalex":"https://openalex.org/W2991149580","doi":"https://doi.org/10.1109/hpec.2019.8916559","mag":"2991149580"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpec.2019.8916559","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003537070","display_name":"James Ezick","orcid":null},"institutions":[{"id":"https://openalex.org/I4210102519","display_name":"Reservoir Labs (United States)","ror":"https://ror.org/01a3m3f05","country_code":"US","type":"company","lineage":["https://openalex.org/I4210102519"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Ezick","raw_affiliation_strings":["Reservoir Labs, Inc., New York, NY"],"affiliations":[{"raw_affiliation_string":"Reservoir Labs, Inc., New York, NY","institution_ids":["https://openalex.org/I4210102519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081290223","display_name":"Tom Henretty","orcid":null},"institutions":[{"id":"https://openalex.org/I4210102519","display_name":"Reservoir Labs (United States)","ror":"https://ror.org/01a3m3f05","country_code":"US","type":"company","lineage":["https://openalex.org/I4210102519"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tom Henretty","raw_affiliation_strings":["Reservoir Labs, Inc., New York, NY"],"affiliations":[{"raw_affiliation_string":"Reservoir Labs, Inc., New York, NY","institution_ids":["https://openalex.org/I4210102519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104040289","display_name":"Muthu Manikandan Baskaran","orcid":null},"institutions":[{"id":"https://openalex.org/I4210102519","display_name":"Reservoir Labs (United States)","ror":"https://ror.org/01a3m3f05","country_code":"US","type":"company","lineage":["https://openalex.org/I4210102519"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muthu Baskaran","raw_affiliation_strings":["Reservoir Labs, Inc., New York, NY"],"affiliations":[{"raw_affiliation_string":"Reservoir Labs, Inc., New York, NY","institution_ids":["https://openalex.org/I4210102519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108503417","display_name":"Richard Lethin","orcid":null},"institutions":[{"id":"https://openalex.org/I4210102519","display_name":"Reservoir Labs (United States)","ror":"https://ror.org/01a3m3f05","country_code":"US","type":"company","lineage":["https://openalex.org/I4210102519"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Lethin","raw_affiliation_strings":["Reservoir Labs, Inc., New York, NY"],"affiliations":[{"raw_affiliation_string":"Reservoir Labs, Inc., New York, NY","institution_ids":["https://openalex.org/I4210102519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057593011","display_name":"John Feo","orcid":"https://orcid.org/0000-0001-6546-8948"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"funder","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Feo","raw_affiliation_strings":["Pacific Northwest National Laboratory, Richland, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Richland, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069592479","display_name":"Tai-Ching Tuan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210113003","display_name":"Physical Sciences (United States)","ror":"https://ror.org/021qvjc46","country_code":"US","type":"company","lineage":["https://openalex.org/I4210113003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tai-Ching Tuan","raw_affiliation_strings":["Laboratory for Physical Sciences, College Park, MD"],"affiliations":[{"raw_affiliation_string":"Laboratory for Physical Sciences, College Park, MD","institution_ids":["https://openalex.org/I4210113003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029893651","display_name":"Christopher Coley","orcid":"https://orcid.org/0000-0001-7106-2071"},"institutions":[{"id":"https://openalex.org/I4210113003","display_name":"Physical Sciences (United States)","ror":"https://ror.org/021qvjc46","country_code":"US","type":"company","lineage":["https://openalex.org/I4210113003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Coley","raw_affiliation_strings":["Laboratory for Physical Sciences, College Park, MD"],"affiliations":[{"raw_affiliation_string":"Laboratory for Physical Sciences, College Park, MD","institution_ids":["https://openalex.org/I4210113003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000595338","display_name":"Leslie Leonard","orcid":"https://orcid.org/0000-0003-2610-8186"},"institutions":[{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"funder","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]},{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leslie Leonard","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I87303767","https://openalex.org/I4210088792","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016702627","display_name":"Rajeev Agrawal","orcid":"https://orcid.org/0000-0002-5415-5230"},"institutions":[{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]},{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"funder","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rajeev Agrawal","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I4210088792","https://openalex.org/I4210126846","https://openalex.org/I87303767"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000868067","display_name":"Ben Parsons","orcid":"https://orcid.org/0000-0001-9870-1347"},"institutions":[{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"funder","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]},{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ben Parsons","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I87303767","https://openalex.org/I4210088792","https://openalex.org/I4210126846"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032859199","display_name":"William Glodek","orcid":null},"institutions":[{"id":"https://openalex.org/I4210107461","display_name":"Capital Meeting Planning","ror":"https://ror.org/01f6f4a30","country_code":"US","type":"company","lineage":["https://openalex.org/I4210107461"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Glodek","raw_affiliation_strings":["BreakPoint Labs Falls Church, VA, 22042"],"affiliations":[{"raw_affiliation_string":"BreakPoint Labs Falls Church, VA, 22042","institution_ids":["https://openalex.org/I4210107461"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.405,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.783505,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":88},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T12303","display_name":"Tensor decomposition and applications","score":0.995,"subfield":{"id":"https://openalex.org/subfields/2605","display_name":"Computational Mathematics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12303","display_name":"Tensor decomposition and applications","score":0.995,"subfield":{"id":"https://openalex.org/subfields/2605","display_name":"Computational Mathematics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9867,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation Awareness","score":0.7814727},{"id":"https://openalex.org/keywords/power-graph-analysis","display_name":"Power graph analysis","score":0.41801885}],"concepts":[{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.7814727},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.75196886},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.65134794},{"id":"https://openalex.org/C83283714","wikidata":"https://www.wikidata.org/wiki/Q121117","display_name":"Supercomputer","level":2,"score":0.6159592},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5863993},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.56041265},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4487247},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4337107},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.41801885},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35346615},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3285221},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.20132363},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1331856},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.12365189},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpec.2019.8916559","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":14,"referenced_works":["https://openalex.org/W2024356620","https://openalex.org/W2033347609","https://openalex.org/W2038310229","https://openalex.org/W2103392911","https://openalex.org/W2132938399","https://openalex.org/W2541878878","https://openalex.org/W2766967332","https://openalex.org/W2797655610","https://openalex.org/W2846440111","https://openalex.org/W2903292462","https://openalex.org/W2914549402","https://openalex.org/W2945649828","https://openalex.org/W2991157588","https://openalex.org/W966149683"],"related_works":["https://openalex.org/W4400094300","https://openalex.org/W3214280620","https://openalex.org/W3191490922","https://openalex.org/W2794038527","https://openalex.org/W2765823764","https://openalex.org/W2384867379","https://openalex.org/W2329539859","https://openalex.org/W2327638088","https://openalex.org/W2227905990","https://openalex.org/W2019038080"],"abstract_inverted_index":{"This":[0],"paper":[1],"describes":[2],"MADHAT":[3,30,115,166],"(Multidimensional":[4],"Anomaly":[5],"Detection":[6],"fusing":[7],"HPC,":[8],"Analytics,":[9],"and":[10,41,96,100,112,130,141,155],"Tensors),":[11],"an":[12],"integrated":[13],"workflow":[14],"that":[15,56,75],"demonstrates":[16],"the":[17,23,77,119,150],"applicability":[18],"of":[19,25,51,79],"HPC":[20,121,147],"resources":[21,148],"to":[22,103],"problem":[24],"maintaining":[26],"cyber":[27],"situational":[28],"awareness.":[29],"combines":[31,76],"two":[32],"high-performance":[33],"packages:":[34],"ENSIGN":[35],"for":[36,43,123],"large-scale":[37],"sparse":[38],"tensor":[39],"decompositions":[40,47],"HAGGLE":[42],"graph":[44,66],"analytics.":[45],"Tensor":[46],"isolate":[48],"coherent":[49],"patterns":[50,81],"network":[52,93,134],"behavior":[53],"in":[54],"ways":[55],"common":[57],"clustering":[58],"methods":[59],"based":[60],"on":[61,72,132],"distance":[62],"metrics":[63],"cannot.":[64],"Parallelized":[65],"analysis":[67],"then":[68],"uses":[69],"directed":[70],"queries":[71],"a":[73,107],"representation":[74],"elements":[78],"identified":[80],"with":[82,170],"other":[83],"available":[84],"information":[85],"(such":[86],"as":[87],"additional":[88],"log":[89],"fields,":[90],"domain":[91],"knowledge,":[92],"topology,":[94],"whitelists":[95],"blacklists,":[97],"prior":[98],"feedback,":[99],"published":[101],"alerts)":[102],"confirm":[104],"or":[105],"reject":[106],"threat":[108],"hypothesis,":[109],"collect":[110],"context,":[111],"raise":[113],"alerts.":[114],"was":[116],"developed":[117],"using":[118,146],"collaborative":[120],"Architecture":[122],"Cyber":[124],"Situational":[125],"Awareness":[126],"(HACSAW)":[127],"research":[128],"environment":[129],"evaluated":[131],"structured":[133],"sensor":[135],"logs":[136,169],"collected":[137],"from":[138],"Defense":[139],"Research":[140,154],"Engineering":[142],"Network":[143],"(DREN)":[144],"sites":[145],"at":[149],"U.S.":[151],"Army":[152],"Engineer":[153],"Development":[156],"Center":[157,161],"DoD":[158],"Supercomputing":[159],"Resource":[160],"(ERDC":[162],"DSRC).":[163],"To":[164],"date,":[165],"has":[167],"analyzed":[168],"over":[171],"650":[172],"million":[173],"entries.":[174]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2991149580","counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3}],"updated_date":"2025-04-21T23:30:47.223489","created_date":"2019-12-05"}