61 citations · 210 across the 13 of their papers we have counts for
13 papers
CONTRACTFIX: A Framework for Automatically Fixing Vulnerabilities in Smart Contracts
Pengcheng, Peng, Yun +7
The increased adoption of smart contracts in many industries has made them an attractive target for cybercriminals, leading to millions of dollars in losses. Thus, deploying smart…
ThreatKG: An AI-Powered System for Automated Open-Source Cyber Threat Intelligence Gathering and Management
Peng Gao, Xiaoyuan Liu, Edward Choi +3
Open-source cyber threat intelligence (OSCTI) has become essential for keeping up with the rapidly changing threat landscape. However, current OSCTI gathering and management soluti…
Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis
Saimon Amanuel Tsegai, Xinyu Yang, Haoyuan Liu +1
System auditing is a vital technique for collecting system call events as system provenance and investigating complex multi-step attacks such as Advanced Persistent Threats. Howeve…
CHAMP: Characterizing Undesired App Behaviors from User Comments based on Market Policies
Yangyu Hu, Haoyu Wang, Tiantong Ji +4
Millions of mobile apps have been available through various app markets. Although most app markets have enforced a number of automated or even manual mechanisms to vet each app bef…
A System for Automated Open-Source Threat Intelligence Gathering and Management
Peng Gao, Xiaoyuan Liu, Edward Choi +4
To remain aware of the fast-evolving cyber threat landscape, open-source Cyber Threat Intelligence (OSCTI) has received growing attention from the community. Commonly, knowledge ab…
A System for Efficiently Hunting for Cyber Threats in Computer Systems Using Threat Intelligence
Peng Gao, Fei Shao, Xiaoyuan Liu +7
Log-based cyber threat hunting has emerged as an important solution to counter sophisticated cyber attacks. However, existing approaches require non-trivial efforts of manual query…
Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence
Peng Gao, Fei Shao, Xiaoyuan Liu +6
Log-based cyber threat hunting has emerged as an important solution to counter sophisticated attacks. However, existing approaches require non-trivial efforts of manual query const…
Querying Streaming System Monitoring Data for Enterprise System Anomaly Detection
Peng Gao, Xusheng Xiao, Ding Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely ab…
A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…
SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
Peng Gao, Xusheng Xiao, Ding Li +6
Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…
AIQL: Enabling Efficient Attack Investigation from System Monitoring Data
Peng Gao, Xusheng Xiao, Zhichun Li +4
The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…
SybilFuse: Combining Local Attributes with Global Structure to Perform Robust Sybil Detection
Peng Gao, Binghui Wang, Neil Zhenqiang Gong +3
Sybil attacks are becoming increasingly widespread and pose a significant threat to online social systems; a single adversary can inject multiple colluding identities in the system…
SybilFrame: A Defense-in-Depth Framework for Structure-Based Sybil Detection
Peng Gao, Neil Zhenqiang Gong, Sanjeev Kulkarni +2
Sybil attacks are becoming increasingly widespread, and pose a significant threat to online social systems; a single adversary can inject multiple colluding identities in the syste…