activity
20182023
most citedAIQL: Enabling Efficient Attack Investigation from System Monitoring Data

56 citations · 103 across the 12 of their papers we have counts for

collaborators
Showing cs.CRShow all

6 papers · 1 filter

cs.CR2021

Stealthy Backdoors as Compression Artifacts

Yulong Tian, Fnu Suya, Fengyuan Xu +1

In a backdoor attack on a machine learning model, an adversary produces a model that performs well on normal inputs but outputs targeted misclassifications on inputs containing a s…

cs.CR2021★ 1 cited

A System for Efficiently Hunting for Cyber Threats in Computer Systems Using Threat Intelligence

Peng Gao, Fei Shao, Xiaoyuan Liu +7

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated cyber attacks. However, existing approaches require non-trivial efforts of manual query…

cs.CR2021★ 9 cited

LEAP: TrustZone Based Developer-Friendly TEE for Intelligent Mobile Apps

Lizhi Sun, Shuocheng Wang, Hao Wu +5

ARM TrustZone is widely deployed on commercial-off-the-shelf mobile devices for secure execution. However, many Apps cannot enjoy this feature because it brings many constraints to…

cs.CR2020★ 11 cited

Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence

Peng Gao, Fei Shao, Xiaoyuan Liu +6

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated attacks. However, existing approaches require non-trivial efforts of manual query const…

cs.CR2018

A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security

Peng Gao, Xusheng Xiao, Zhichun Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…

cs.CR2018★ 56 cited

AIQL: Enabling Efficient Attack Investigation from System Monitoring Data

Peng Gao, Xusheng Xiao, Zhichun Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…