432 citations · 520 across the 17 of their papers we have counts for
5 papers · 1 filter
Automated Rule Mutation for Emerging Attack Variants using Infrastructure-Aware Technique Proximity
Sepehr Ghaffarzadegan, Boubakr Nour, Makan Pourzandi +2
Detection rules are typically crafted based on specific observations of an attack. While these rules are effective for particular attack instances, their coverage diminishes when a…
Evidence-Grounded Retrieval for Investigation Hunt Lead Generation from CTI Reports
Akash Prakash, Boubakr Nour, Makan Pourzandi +2
Threat hunting increasingly depends on converting unstructured knowledge (e.g., Cyber Threat Intelligence reports) into actionable hunt leads: concise, investigable hypotheses grou…
From Threat Intelligence to Detection: Knowledge-driven Enrichment and Template-based Rule Grounding for Automated Sigma Rule Generation
Sepehr Ghaffarzadegan, Boubakr Nour, Makan Pourzandi +2
Mechanisms for dynamically converting cyber threat intelligence (CTI) into actionable detection capabilities are necessary due to the rapid evolution of Advanced Persistent Threats…
Automated Attack Testflow Extraction from Cyber Threat Report using BERT for Contextual Analysis
Faissal Ahmadou, Sepehr Ghaffarzadegan, Boubakr Nour +3
In the ever-evolving landscape of cybersecurity, the rapid identification and mitigation of Advanced Persistent Threats (APTs) is crucial. Security practitioners rely on detailed t…
An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks
Andrew Churcher, Rehmat Ullah, Jawad Ahmad +6
In recent years, there has been a massive increase in the amount of Internet of Things (IoT) devices as well as the data generated by such devices. The participating devices in IoT…