31 citations · 72 across the 5 of their papers we have counts for
6 papers
APTInvestBench: Evaluating Autonomous APT Investigation under Varying Telemetry
Yu Wang, Shuhao Li, Tao Yin +4
Large language model (LLM) agents could help security operations centers (SOCs) investigate advanced persistent threats (APTs) by turning weak leads into evidence for intrusion sco…
Analysis and Detection against Network Attacks in the Overlapping Phenomenon of Behavior Attribute
Jiang Xie, Shuhao Li, Yongzheng Zhanga +2
The proliferation of network attacks poses a significant threat. Researchers propose datasets for network attacks to support research in related fields. Then, many attack detection…
Detecting unknown HTTP-based malicious communication behavior via generated adversarial flows and hierarchical traffic features
Xiaochun Yun, Jiang Xie, Shuhao Li +2
Malicious communication behavior is the network communication behavior generated by malware (bot-net, spyware, etc.) after victim devices are infected. Experienced adversaries ofte…
HSTF-Model: an HTTP-based Trojan Detection Model via the Hierarchical Spatio-Temporal Features of Traffics
Jiang Xie, Shuhao Lia, Xiaochun Yun +2
HTTP-based Trojan is extremely threatening, and it is difficult to be effectively detected because of its concealment and confusion. Previous detection methods usually are with poo…
Listen to Minority: Encrypted Traffic Classification for Class Imbalance with Contrastive Pre-Training
Xiang Li, Juncheng Guo, Qige Song +4
Mobile Internet has profoundly reshaped modern lifestyles in various aspects. Encrypted Traffic Classification (ETC) naturally plays a crucial role in managing mobile Internet, esp…
A method based on hierarchical spatiotemporal features for trojan traffic detection
Jiang Xie, Shuhao Li, Yongzheng Zhang +2
Trojans are one of the most threatening network attacks currently. HTTP-based Trojan, in particular, accounts for a considerable proportion of them. Moreover, as the network enviro…