12 citations · 13 across the 3 of their papers we have counts for
4 papers · 1 filter
From Investigation Failures to Reliable SOC Agents: Understanding and Improving LLM-Based Alert Triage
Saimon Amanuel Tsegai, Alex Kantchelian, Danfeng +2
Security operations centers (SOCs) must triage large volumes of alerts, most of which are benign, while missed attacks can remain uninvestigated. Tool-using large language model (L…
eMicro: Real-Time Multi-Hop Access Control for Microservices with eBPF
Rizky Ramadhana Putra, Osama Bajaber, Saimon Amanuel Tsegai +4
Modern cloud applications often comprise thousands of microservices whose interactions form complex request paths. Traditional inter-service access control restricts individual ser…
CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models
Yutong Cheng, Osama Bajaber, Saimon Amanuel Tsegai +2
Textual descriptions in cyber threat intelligence (CTI) reports, such as security articles and news, are rich sources of knowledge about cyber threats, crucial for organizations to…
Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis
Saimon Amanuel Tsegai, Xinyu Yang, Haoyuan Liu +1
System auditing is a vital technique for collecting system call events as system provenance and investigating complex multi-step attacks such as Advanced Persistent Threats. Howeve…