42 citations
Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.
3 papers · 1 filter
TapTree: Process-Tree Based Host Behavior Modeling and Threat Detection Framework via Sequential Pattern Mining
Mohammad Mamun, Scott Buffett
Audit logs containing system level events are frequently used for behavior modeling as they can provide detailed insight into cyber-threat occurrences. However, mapping low-level s…
ANUBIS: A Provenance Graph-Based Framework for Advanced Persistent Threat Detection
Md. Monowar Anjum, Shahrear Iqbal, Benoit Hamelin
We present ANUBIS, a highly effective machine learning-based APT detection system. Our design philosophy for ANUBIS involves two principal components. Firstly, we intend ANUBIS to…
Analyzing the Usefulness of the DARPA OpTC Dataset in Cyber Threat Detection Research
Md. Monowar Anjum, Shahrear Iqbal, Benoit Hamelin
Maintaining security and privacy in real-world enterprise networks is becoming more and more challenging. Cyber actors are increasingly employing previously unreported and state-of…