11 citations · 12 across the 8 of their papers we have counts for
10 papers
SpecForge: Recursive Self-Improvement for Coding Agents via Behavioral Specifications
Yutong Cheng, Haifeng Chen, Peng Gao +1
Coding agents based on frozen language models can improve their performance by refining the external context they rely on, without updating model weights. We study recursive self-i…
Connectedness, Cognitive Load, and Human-AI Oversight in Cyber Operations
Nathan Conklin, Peng Gao, Chris North
AI-assisted cyber situational awareness triggers machine-generated reasoning traces (step-by-step justifications for anomaly classifications) that a human operator is expected to r…
Breaking Ambient Trust: In-Network Per-Process Access Control Against Lateral Movement
Osama Bajaber, Bo Ji, Peng Gao
Enterprise networks remain vulnerable to Advanced Persistent Threats (APTs), where adversaries gain an initial foothold and move laterally across the network, accumulating access p…
BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence
Changze Li, Yutong Cheng, Tsania Camila Finnisa +3
Cyber threat intelligence (CTI) is foundational to modern cyber defense, yet much of it resides in unstructured reports whose volume and heterogeneity far exceed manual analysis, m…
Agenra: A Language and Verified Core for Stateful LLM Agent Authorization
Basavesh Ammanaghatta Shivakumar, Swarn Priya, Peng Gao
Applications that deploy LLM agents keep revising the permissions their agents use. When authority is consumable, even widening a permission can break a legitimate workflow, becaus…
CTIFoundry: An Agent-Native Corpus Scaffold for Cyber Threat Intelligence
Yutong Cheng, Changze Li, Qian Cui +4
Cyber threat intelligence (CTI) is increasingly consumed not by human analysts but by LLM agents that compose multi-step investigations at query time. The harness side of this shif…
eMicro: Real-Time Multi-Hop Access Control for Microservices with eBPF
Rizky Ramadhana Putra, Osama Bajaber, Saimon Amanuel Tsegai +4
Modern cloud applications often comprise thousands of microservices whose interactions form complex request paths. Traditional inter-service access control restricts individual ser…
CTI2TTP: Evidence-Grounded TTP Extraction from Cyber Threat Intelligence via Diverge-then-Converge Verification
Yutong Cheng, Changze Li, Raihan Sultan Pasha Basuki +3
Extracting MITRE ATT&CK techniques from cyber threat intelligence (CTI) reports is an open-set, multi-label problem requiring both high recall (not missing techniques) and high pre…
CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models
Yutong Cheng, Osama Bajaber, Saimon Amanuel Tsegai +2
Textual descriptions in cyber threat intelligence (CTI) reports, such as security articles and news, are rich sources of knowledge about cyber threats, crucial for organizations to…
P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF
Osama Bajaber, Bo Ji, Peng Gao
Modern targeted attacks such as Advanced Persistent Threats use multiple hosts as stepping stones and move laterally across them to gain deeper access to the network. However, exis…