61 citations · 152 across the 9 of their papers we have counts for
4 papers · 1 filter
Attentional Heterogeneous Graph Neural Network: Application to Program Reidentification
Shen Wang, Zhengzhang Chen, Ding Li +6
Program or process is an integral part of almost every IT/OT system. Can we trust the identity/ID (e.g., executable name) of the program? To avoid detection, malware may disguise i…
A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…
SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
Peng Gao, Xusheng Xiao, Ding Li +6
Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…
AIQL: Enabling Efficient Attack Investigation from System Monitoring Data
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…