activity
20182025
most citedSAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection

61 citations · 122 across the 6 of their papers we have counts for

collaborators

6 papers

cs.LG2025

PROVCREATOR: Synthesizing Complex Heterogenous Graphs with Node and Edge Attributes

Tianhao Wang, Simon Klancher, Kunal Mukherjee +4

The rise of graph-structured data has driven interest in graph learning and synthetic data generation. While successful in text and image domains, synthetic graph generation remain…

cs.CR2023★ 4 cited

Interpreting GNN-based IDS Detections Using Provenance Graph Structural Features

Kunal Mukherjee, Joshua Wiedemeier, Tianhao Wang +4

Advanced cyber threats (e.g., Fileless Malware and Advanced Persistent Threat (APT)) have driven the adoption of provenance-based security solutions. These solutions employ Machine…

cs.CR2019★ 1 cited

Querying Streaming System Monitoring Data for Enterprise System Anomaly Detection

Peng Gao, Xusheng Xiao, Ding Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely ab…

cs.CR2018

A Query System for Efficiently Investigating Complex Attack Behaviors for Enterprise Security

Peng Gao, Xusheng Xiao, Zhichun Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each enterprise host, and perform timely at…

cs.CR2018★ 61 cited

SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection

Peng Gao, Xusheng Xiao, Ding Li +6

Recently, advanced cyber attacks, which consist of a sequence of steps that involve many vulnerabilities and hosts, compromise the security of many well-protected businesses. This…

cs.CR2018★ 56 cited

AIQL: Enabling Efficient Attack Investigation from System Monitoring Data

Peng Gao, Xusheng Xiao, Zhichun Li +4

The need for countering Advanced Persistent Threat (APT) attacks has led to the solutions that ubiquitously monitor system activities in each host, and perform timely attack invest…