output
20022026
most citedPOIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting

276 citations

Showing cs.CRShow all

9 papers · 1 filter

cs.CR2025

SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models

Mohamed Afane, Abhishek Satyam, Ke Chen +3

Backdoor attacks create significant security threats to language models by embedding hidden triggers that manipulate model behavior during inference, presenting critical risks for…

cs.CR2025★ 9 cited

Large Language Models for Power System Security: A Novel Multi-Modal Approach for Anomaly Detection in Energy Management Systems

Aydin Zaboli, Junho Hong, Alexandru Stefanov +2

This paper elaborates on an extensive security framework specifically designed for energy management systems (EMSs), which effectively tackles the dynamic environment of cybersecur…

cs.CR2021

PRICURE: Privacy-Preserving Collaborative Inference in a Multi-Party Setting

Ismat Jarin, Birhanu Eshete

When multiple parties that deal with private data aim for a collaborative prediction task such as medical image classification, they are often constrained by data protection regula…

cs.CR2019★ 276 cited

POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting

Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo +1

Cyber threat intelligence (CTI) is being used to search for indicators of attacks that might have compromised an enterprise network for a long time without being discovered. To hav…

cs.CR2018

ProPatrol: Attack Investigation via Extracted High-Level Tasks

Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo +1

Kernel audit logs are an invaluable source of information in the forensic investigation of a cyber-attack. However, the coarse granularity of dependency information in audit logs l…

cs.CR2018★ 30 cited

HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows

Sadegh M. Milajerdi, Rigel Gjomemo, Birhanu Eshete +2

In this paper, we present HOLMES, a system that implements a new approach to the detection of Advanced and Persistent Threats (APTs). HOLMES is inspired by several case studies of…

cs.CR2018

Linking Received Packet to the Transmitter Through Physical-Fingerprinting of Controller Area Network

Omid Avatefipour, Azeem Hafeez, Muhammad Tayyab +1

The Controller Area Network (CAN) bus serves as a legacy protocol for in-vehicle data communication. Simplicity, robustness, and suitability for real-time systems are the salient f…

cs.CR2014★ 1 cited

Audio Splicing Detection and Localization Using Environmental Signature

Hong Zhao, Yifan Chen, Rui Wang +1

Audio splicing is one of the most common manipulation techniques in the area of audio forensics. In this paper, the magnitudes of acoustic channel impulse response and ambient nois…

cs.CR2013★ 1 cited

Tap-Wave-Rub: Lightweight Malware Prevention for Smartphones Using Intuitive Human Gestures

Haoyu Li, Di Ma, Nitesh Saxena +2

In this paper, we introduce a lightweight permission enforcement approach - Tap-Wave-Rub (TWR) - for smartphone malware prevention. TWR is based on simple human gestures that are v…