36 citations · 66 across the 7 of their papers we have counts for
7 papers
Peer-group Behaviour Analytics of Windows Authentications Events Using Hierarchical Bayesian Modelling
Iwona Hawryluk, Henrique Hoeltgebaum, Cole Sodja +2
Cyber-security analysts face an increasingly large number of alerts received on any given day. This is mainly due to the low precision of many existing methods to detect threats, p…
Living-Off-The-Land Command Detection Using Active Learning
Talha Ongun, Jack W. Stokes, Jonathan Bar Or +6
In recent years, enterprises have been targeted by advanced adversaries who leverage creative ways to infiltrate their systems and move laterally to gain access to critical data. O…
A Large-Scale Database for Graph Representation Learning
Scott Freitas, Yuxiao Dong, Joshua Neil +1
With the rapid emergence of graph representation learning, the construction of new large-scale datasets is necessary to distinguish model capabilities and accurately assess the str…
D2M: Dynamic Defense and Modeling of Adversarial Movement in Networks
Scott Freitas, Andrew Wicker, Duen Horng Chau +1
Given a large enterprise network of devices and their authentication history (e.g., device logons), how can we quantify network vulnerability to lateral attack and identify at-risk…
Link prediction in dynamic networks using random dot product graphs
Francesco Sanna Passino, Anna S. Bertiger, Joshua C. Neil +1
The problem of predicting links in large networks is an important task in a variety of practical applications, including social sciences, biology and computer security. In this pap…
Anomaly Detection in Large Scale Networks with Latent Space Models
Wesley Lee, Tyler H. McCormick, Joshua Neil +2
We develop a real-time anomaly detection algorithm for directed activity on large, sparse networks. We model the propensity for future activity using a dynamic logistic model with…
A Likelihood Ratio Detector for Identifying Within-Perimeter Computer Network Attacks
Justin Grana, David Wolpert, Joshua Neil +3
The rapid detection of attackers within firewalls of enterprise computer net- works is of paramount importance. Anomaly detectors address this problem by quantifying deviations fro…