activity
20202026
most citedThreat Detection and Investigation with System-level Provenance Graphs: A Survey

8 citations · 10 across the 13 of their papers we have counts for

collaborators
Showing 2026Show all

5 papers · 1 filter

cs.CR2026

MazeRunner: Nonlinear Task and Clue Orchestration for LLM-driven Black-Box Automated Penetration Testing

Zhenyuan Li, Yi Jiang, Junjie Cheng +3

Penetration testing is essential yet resource-intensive. Although large language models (LLMs) show promise for automating security auditing, existing agents mainly execute end-to-…

cs.CR2026

SherAgent: Scaling Attack Investigation in the Wild via LLM-Empowered Iterative Query-Filter Backtracking

Zhenyuan Li, Zhengkai Wang, Ling Jiang +5

Provenance-based attack investigation enables viable automation by standardizing data and query logic; however, it is critically hindered in practice by dependency explosions and f…

cs.CR2026

Minos: A Multi-Agent Collaborative Framework for Provenance-Based Backward Tracking

Jiahui Wang, Zhenyuan Li, Zhengkai Wang +2

Sophisticated cyber attacks, particularly Advanced Persistent Threats (APTs), require effective post-intrusion forensic analysis. Provenance-based backward tracking reconstructs at…

cs.CR2026

Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies

Ruixiao Lin, Xinhao Deng, Qingming Li +12

Self-evolving LLM agent systems, which autonomously update their model parameters, memory, tools, and architectures, introduce a qualitatively new threat landscape in which adversa…

cs.CR2026

Cross-Layer Semantic Flow Reconstruction for Attack Detection in Agentic Systems

Qizhi Cai, Yangyang Wei, Zhipeng Chen +2

Agentic systems increasingly orchestrate complex, tool-using workflows within agentic execution environments, where high-level goals and tool invocations at the application layer m…