373 citations
- NEC (Japan)JP12 papers
- Michigan State UniversityUS7 papers
- Princeton UniversityUS7 papers
- University of California, MercedUS7 papers
- University of California San DiegoUS7 papers
- Rutgers, The State University of New JerseyUS4 papers
- Stanford UniversityUS4 papers
- Case Western Reserve UniversityUS3 papers
- Columbia UniversityUS3 papers
- The University of TokyoJP3 papers
- Université Paris-SudFR3 papers
- University of WaterlooCA3 papers
Showing cs.CRShow all
3 papers · 1 filter
cs.CR2018
A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…
cs.CR2018★ 61 cited
SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
Peng Gao, Xusheng Xiao, Ding Li +6
Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…
cs.CR2018★ 56 cited
AIQL: Enabling Efficient Attack Investigation from System Monitoring Data
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…