activity
20182020
most citedSAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection

61 citations · 98 across the 6 of their papers we have counts for

collaborators

6 papers

cs.CR2020★ 18 cited

SIGL: Securing Software Installations Through Deep Graph Learning

Xueyuan Han, Xiao Yu, Thomas Pasquier +5

Many users implicitly assume that software can only be exploited after it is installed. However, recent supply-chain attacks demonstrate that application integrity must be ensured…

cs.LG2020★ 11 cited

Structural Temporal Graph Neural Networks for Anomaly Detection in Dynamic Graphs

Lei Cai, Zhengzhang Chen, Chen Luo +4

Detecting anomalies in dynamic graphs is a vital task, with numerous practical applications in areas such as security, finance, and social media. Previous network embedding based m…

cs.CR2019★ 6 cited

Heterogeneous Graph Matching Networks

Shen Wang, Zhengzhang Chen, Xiao Yu +7

Information systems have widely been the target of malware attacks. Traditional signature-based malicious program detection algorithms can only detect known malware and are prone t…

cs.CR2019★ 1 cited

Querying Streaming System Monitoring Data for Enterprise System Anomaly Detection

Peng Gao, Xusheng Xiao, Ding Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely ab…

cs.CR2018★ 1 cited

Attentional Heterogeneous Graph Neural Network: Application to Program Reidentification

Shen Wang, Zhengzhang Chen, Ding Li +6

Program or process is an integral part of almost every IT/OT system. Can we trust the identity/ID (e.g., executable name) of the program? To avoid detection, malware may disguise i…

cs.CR2018★ 61 cited

SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection

Peng Gao, Xusheng Xiao, Ding Li +6

Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…