activity
20212026
most citedTBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph

5 citations · 10 across the 14 of their papers we have counts for

collaborators
Showing cs.CRShow all

7 papers · 1 filter

cs.CR2026

SherAgent: Scaling Attack Investigation in the Wild via LLM-Empowered Iterative Query-Filter Backtracking

Zhenyuan Li, Zhengkai Wang, Ling Jiang +5

Provenance-based attack investigation enables viable automation by standardizing data and query logic; however, it is critically hindered in practice by dependency explosions and f…

cs.CR2026

How Far Should We Need to Go : Evaluate Provenance-based Intrusion Detection Systems in Industrial Scenarios

Yue Xiao, Ling Jiang, Sen Nie +4

Provenance-based Intrusion Detection Systems (PIDSes) have been widely used to detect Advanced Persistent Threats (APTs). Although many studies achieve high performance in the eval…

cs.CR2025

ScamSweeper: Detecting Illegal Accounts in Web3 Scams via Transactions Analysis

Xiaoqi Li, Wenkai Li, Zhijie Liu +6

The web3 applications have recently been growing, especially on the Ethereum platform, starting to become the target of scammers. The web3 scams, imitating the services provided by…

cs.CR2025

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis

Zhijie Liu, Qiyi Tang, Sen Nie +3

Binary code similarity analysis (BCSA) is a crucial research area in many fields such as cybersecurity. Specifically, function-level diffing tools are the most widely used in BCSA:…

cs.CR2025

SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecurity

Pengfei Jing, Mengyun Tang, Xiaorong Shi +5

Evaluating Large Language Models (LLMs) is crucial for understanding their capabilities and limitations across various applications, including natural language processing and code…

cs.CR2024

Detecting Malicious Accounts in Web3 through Transaction Graph

Wenkai Li, Zhijie Liu, Xiaoqi Li +1

The web3 applications have recently been growing, especially on the Ethereum platform, starting to become the target of scammers. The web3 scams, imitating the services provided by…

cs.CR2023★ 5 cited

TBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph

Nan Wang, Xuezhi Wen, Dalin Zhang +7

APT detection is difficult to detect due to the long-term latency, covert and slow multistage attack patterns of Advanced Persistent Threat (APT). To tackle these issues, we propos…