10 papers
FuseChain: Runtime Evidence Reconstruction for Software Supply-Chain Attacks
Zhuoran Tan, Yutian Tang, Jeremy Singer +2
Software supply-chain (SSC) attacks are increasingly multi-stage, cross-source, and temporally distributed. A single attack campaign may leave weak and fragmented traces across mul…
Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims
Zhuoran Tan, Jeremy Singer, Christos Anagnostopoulos
Modern Large Language Model (LLM) systems are assembled from third-party artifacts such as pre-trained weights, fine-tuning adapters, datasets, dependency packages, and container i…
An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks
Zhuoran Tan, Wenbo Guo, Jiewen Luo +3
Advanced software supply chain (SSC) attacks are increasingly runtime-only and leave fragmented evidence across hosts, services, and build/dependency layers, making any single tele…
Operational Runtime Behavior Mining for Open-Source Supply Chain Security
Zhuoran Tan, Ke Xiao, Jeremy Singer +1
Open-source software (OSS) is a critical component of modern software systems, yet supply chain security remains challenging in practice due to unavailable or obfuscated source cod…
MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools
Zhuoran Tan, Run Hao, Jeremy Singer +2
Tool-augmented Large Language Model (LLM) agents create a new supply-chain surface: Model Context Protocol (MCP) tools are installed like third-party packages, yet their outputs ca…
Distributed Log-driven Anomaly Detection System based on Evolving Decision Making
Zhuoran Tan, Qiyuan Wang, Christos Anagnostopoulos +3
Effective anomaly detection from logs is crucial for enhancing cybersecurity defenses by enabling the early identification of threats. Despite advances in anomaly detection, existi…
Distributed Temporal Graph Learning with Provenance for APT Detection in Supply Chains
Zhuoran Tan, Christos Anagnostopoulos, Jeremy Singer
Cyber supply chain, encompassing digital asserts, software, hardware, has become an essential component of modern Information and Communications Technology (ICT) provisioning. Howe…
STaRFormer: Semi-Supervised Task-Informed Representation Learning via Dynamic Attention-Based Regional Masking for Sequential Data
Maximilian Forstenhäusler, Daniel Külzer, Christos Anagnostopoulos +2
Understanding user intent is essential for situational and context-aware decision-making. Motivated by a real-world scenario, this work addresses intent predictions of smart device…
OSPtrack: A Labeled Dataset Targeting Simulated Execution of Open-Source Software
Zhuoran Tan, Christos Anagnosstopoulos, Jeremy Singer
Open-source software serves as a foundation for the internet and the cyber supply chain, but its exploitation is becoming increasingly prevalent. While advances in vulnerability de…
Unified Semantic Log Parsing and Causal Graph Construction for Attack Attribution
Zhuoran Tan, Christos Anagnostopoulos, Shameem P. Parambath +1
Multi-source logs provide a comprehensive overview of ongoing system activities, allowing for in-depth analysis to detect potential threats. A practical approach for threat detecti…