26 citations · 48 across the 6 of their papers we have counts for
6 papers
Can Risk-Based Alerting Mitigate Cybersecurity Alert Fatigue?
Rafael Uetz, Philipp Bönninghausen, Louis Hackländer-Jansen +1
Security operations centers (SOCs) face large numbers of false alerts, making detection of cyberattacks difficult under typical resource constraints. Risk-based alerting (RBA) has…
Bounty Hunter: Autonomous, Comprehensive Emulation of Multi-Faceted Adversaries
Louis Hackländer-Jansen, Rafael Uetz, Martin Henze
Adversary emulation is an essential procedure for cybersecurity assessments such as evaluating an organization's security posture or facilitating structured training and research i…
Introducing a Comprehensive, Continuous, and Collaborative Survey of Intrusion Detection Datasets
Philipp Bönninghausen, Rafael Uetz, Martin Henze
Researchers in the highly active field of intrusion detection largely rely on public datasets for their experimental evaluations. However, the large number of existing datasets, th…
You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks
Rafael Uetz, Marco Herzog, Louis Hackländer +2
Cyberattacks have grown into a major risk for organizations, with common consequences being data theft, sabotage, and extortion. Since preventive measures do not suffice to repel a…
Reproducible and Adaptable Log Data Generation for Sound Cybersecurity Experiments
Rafael Uetz, Christian Hemminghaus, Louis Hackländer +2
Artifacts such as log data and network traffic are fundamental for cybersecurity research, e.g., in the area of intrusion detection. Yet, most research is based on artifacts that a…
Software Vulnerability Analysis Using CPE and CVE
Luis Alberto Benthin Sanguino, Rafael Uetz
In this paper, we analyze the Common Platform Enumeration (CPE) dictionary and the Common Vulnerabilities and Exposures (CVE) feeds. These repositories are widely used in Vulnerabi…