3 papers
cs.CR2026
TGCM: Topic-Guided Consistency Modeling for One-Step Disentanglement of Interleaved APT Technique Sequences
Guo-Wei Wong, Ming-Chuan Yang, Shou-De Lin +3
Multiple Advanced Persistent Threat (APT) campaigns may execute concurrently, producing audit logs whose events are interleaved without explicit campaign boundaries. We formulate t…
cs.CR2026
SAGA: Synthetic Audit Log Generation for APT Campaigns
Yi-Ting Huang, Ying-Ren Guo, Yu-Sheng Yang +6
With the increasing sophistication of Advanced Persistent Threats (APTs), the demand for effective detection and mitigation strategies and methods has escalated. Program execution…
cs.CR2024
A Cascade Approach for APT Campaign Attribution in System Event Logs: Technique Hunting and Subgraph Matching
Yi-Ting Huang, Ying-Ren Guo, Guo-Wei Wong +1
As Advanced Persistent Threats (APTs) grow increasingly sophisticated, the demand for effective detection methods has intensified. This study addresses the challenge of identifying…