activity
20182021
most citedA System for Efficiently Hunting for Cyber Threats in Computer Systems Using Threat Intelligence

1 citations · 2 across the 3 of their papers we have counts for

collaborators

9 papers

cs.SE20211 cited

CHAMP: Characterizing Undesired App Behaviors from User Comments based on Market Policies

Yangyu Hu, Haoyu Wang, Tiantong Ji +4

Millions of mobile apps have been available through various app markets. Although most app markets have enforced a number of automated or even manual mechanisms to vet each app bef…

cs.CR2021

A System for Automated Open-Source Threat Intelligence Gathering and Management

Peng Gao, Xiaoyuan Liu, Edward Choi +4

To remain aware of the fast-evolving cyber threat landscape, open-source Cyber Threat Intelligence (OSCTI) has received growing attention from the community. Commonly, knowledge ab…

cs.CR20211 cited

A System for Efficiently Hunting for Cyber Threats in Computer Systems Using Threat Intelligence

Peng Gao, Fei Shao, Xiaoyuan Liu +7

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated cyber attacks. However, existing approaches require non-trivial efforts of manual query…

cs.CR2020

Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence

Peng Gao, Fei Shao, Xiaoyuan Liu +6

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated attacks. However, existing approaches require non-trivial efforts of manual query const…

cs.CR2019

Querying Streaming System Monitoring Data for Enterprise System Anomaly Detection

Peng Gao, Xusheng Xiao, Ding Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely ab…

cs.CR2018

A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security

Peng Gao, Xusheng Xiao, Zhichun Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…