4 papers
HunterAgent: Neuro-Symbolic Attack Trace Reconstruction under Anti-Forensics
Guangze Zhao, Yongzheng Zhang, Weilin Gai +3
Modern alert-triage systems reduce SOC burden by filtering false positives, but flagging a high-risk alert is only the start of incident response. Threat hunting requires reconstru…
Information-Dense Reasoning for Efficient and Auditable Security Alert Triage
Guangze Zhao, Yongzheng Zhang, Changbo Tian +3
Security Operations Centers face massive, heterogeneous alert streams under minute-level service windows, creating the Alert Triage Latency Paradox: verbose reasoning chains ensure…
TFLAG:Towards Practical APT Detection via Deviation-Aware Learning on Temporal Provenance Graph
Wenhan Jiang, Tingting Chai, Hongri Liu +2
Advanced Persistent Threat (APT) have grown increasingly complex and concealed, posing formidable challenges to existing Intrusion Detection Systems in identifying and mitigating t…
DegreEmbed: incorporating entity embedding into logic rule learning for knowledge graph reasoning
Haotian Li, Hongri Liu, Yao Wang +2
Knowledge graphs (KGs), as structured representations of real world facts, are intelligent databases incorporating human knowledge that can help machine imitate the way of human pr…