23 citations · 23 across the 9 of their papers we have counts for
9 papers
DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense
Trung V. Phan, Tri Gia Nguyen, Thomas Bauschert
Advanced Persistent Threats (APTs) are difficult to detect and interpret due to their multi-stage and stealthy nature. While recent autonomous defense systems leverage provenance g…
DeepXplain: XAI-Guided Autonomous Defense Against Multi-Stage APT Campaigns
Trung V. Phan, Thomas Bauschert
Advanced Persistent Threats (APTs) are stealthy, multi-stage attacks that require adaptive and timely defense. While deep reinforcement learning (DRL) enables autonomous cyber defe…
DeepStage: Learning Autonomous Defense Policies Against Multi-Stage APT Campaigns
Trung V. Phan, Tri Gia Nguyen, Thomas Bauschert
This paper presents DeepStage, a deep reinforcement learning (DRL) framework for adaptive and stage-aware defense against Advanced Persistent Threats (APTs). The enterprise environ…
Learning the APT Kill Chain: Temporal Reasoning over Provenance Data for Attack Stage Estimation
Trung V. Phan, Thomas Bauschert
Advanced Persistent Threats (APTs) evolve through multiple stages, each exhibiting distinct temporal and structural behaviors. Accurate stage estimation is critical for enabling ad…
Self-Image Multiplicity in a Concave Cylindrical Mirror
Thach A. Nguyen, Kaitlyn S. Yasumura, Duy V. Tran +1
Concave mirrors are fundamental optical elements, yet some easily observed behaviors are rarely addressed in standard textbooks, such as the formation of multiple reflected images.…
Destination-aware Adaptive Traffic Flow Rule Aggregation in Software-Defined Networks
Trung V. Phan, Mehrdad Hajizadeh, Nguyen Tuan Khai +1
In this paper, we propose a destination-aware adaptive traffic flow rule aggregation (DATA) mechanism for facilitating traffic flow monitoring in SDN-based networks. This method ad…
Q-DATA: Enhanced Traffic Flow Monitoring in Software-Defined Networks applying Q-learning
Trung V. Phan, Syed Tasnimul Islam, Tri Gia Nguyen +1
Software-Defined Networking (SDN) introduces a centralized network control and management by separating the data plane from the control plane which facilitates traffic flow monitor…
Q-MIND: Defeating Stealthy DoS Attacks in SDN with a Machine-learning based Defense Framework
Trung V. Phan, T M Rayhan Gias, Syed Tasnimul Islam +3
Software Defined Networking (SDN) enables flexible and scalable network control and management. However, it also introduces new vulnerabilities that can be exploited by attackers.…
Securing Heterogeneous IoT with Intelligent DDoS Attack Behavior Learning
Nhu-Ngoc Dao, Trung V. Phan, Umar Sa ad +3
The rapid increase of diverse Internet of things (IoT) services and devices has raised numerous challenges in terms of connectivity, computation, and security, which networks must…