61 citations · 152 across the 9 of their papers we have counts for
6 papers · 1 filter
Heterogeneous Graph Matching Networks
Shen Wang, Zhengzhang Chen, Xiao Yu +7
Information systems have widely been the target of malware attacks. Traditional signature-based malicious program detection algorithms can only detect known malware and are prone t…
Attentional Heterogeneous Graph Neural Network: Application to Program Reidentification
Shen Wang, Zhengzhang Chen, Ding Li +6
Program or process is an integral part of almost every IT/OT system. Can we trust the identity/ID (e.g., executable name) of the program? To avoid detection, malware may disguise i…
A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…
SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
Peng Gao, Xusheng Xiao, Ding Li +6
Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…
AIQL: Enabling Efficient Attack Investigation from System Monitoring Data
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…
Collaborative Alerts Ranking for Anomaly Detection
Ying Lin, Zhengzhang Chen, Cheng Cao +5
Given a large number of low-level heterogeneous categorical alerts from an anomaly detection system, how to characterize complex relationships between different alerts, filter out…