3 papers
cs.CR2025
Instantiating Standards: Enabling Standard-Driven Text TTP Extraction with Evolvable Memory
Cheng Meng, ZhengWei Jiang, QiuYun Wang +5
Extracting MITRE ATT\&CK Tactics, Techniques, and Procedures (TTPs) from natural language threat reports is crucial yet challenging. Existing methods primarily focus on performance…
cs.CR2024
Winemaking: Extracting Essential Insights for Efficient Threat Detection in Audit Logs
Weiheng Wu, Wei Qiao, Wenhao Yan +5
Advanced Persistent Threats (APTs) are continuously evolving, leveraging their stealthiness and persistence to put increasing pressure on current provenance-based Intrusion Detecti…
cs.CR2024
FG-SAT: Efficient Flow Graph for Encrypted Traffic Classification under Environment Shifts
Susu Cui, Xueying Han, Dongqi Han +6
Encrypted traffic classification plays a critical role in network security and management. Currently, mining deep patterns from side-channel contents and plaintext fields through n…