61 citations · 152 across the 9 of their papers we have counts for
9 papers
Heterogeneous Graph Matching Networks
Shen Wang, Zhengzhang Chen, Xiao Yu +7
Information systems have widely been the target of malware attacks. Traditional signature-based malicious program detection algorithms can only detect known malware and are prone t…
Adversarial Defense Framework for Graph Neural Network
Shen Wang, Zhengzhang Chen, Jingchao Ni +4
Graph neural network (GNN), as a powerful representation learning model on graph data, attracts much attention across various disciplines. However, recent studies show that GNN is…
Attentional Heterogeneous Graph Neural Network: Application to Program Reidentification
Shen Wang, Zhengzhang Chen, Ding Li +6
Program or process is an integral part of almost every IT/OT system. Can we trust the identity/ID (e.g., executable name) of the program? To avoid detection, malware may disguise i…
A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…
SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
Peng Gao, Xusheng Xiao, Ding Li +6
Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…
AIQL: Enabling Efficient Attack Investigation from System Monitoring Data
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…
Accelerating Dependency Graph Learning from Heterogeneous Categorical Event Streams via Knowledge Transfer
Chen Luo, Zhengzhang Chen, Lu-An Tang +2
Dependency graph, as a heterogeneous graph representing the intrinsic relationships between different pairs of system entities, is essential to many data analysis applications, suc…
Collaborative Alerts Ranking for Anomaly Detection
Ying Lin, Zhengzhang Chen, Cheng Cao +5
Given a large number of low-level heterogeneous categorical alerts from an anomaly detection system, how to characterize complex relationships between different alerts, filter out…
Behavior Query Discovery in System-Generated Temporal Graphs
Bo Zong, Xusheng Xiao, Zhichun Li +5
Computer system monitoring generates huge amounts of logs that record the interaction of system entities. How to query such data to better understand system behaviors and identify…