31 citations · 72 across the 5 of their papers we have counts for
4 papers · 1 filter
APTInvestBench: Evaluating Autonomous APT Investigation under Varying Telemetry
Yu Wang, Shuhao Li, Tao Yin +4
Large language model (LLM) agents could help security operations centers (SOCs) investigate advanced persistent threats (APTs) by turning weak leads into evidence for intrusion sco…
Analysis and Detection against Network Attacks in the Overlapping Phenomenon of Behavior Attribute
Jiang Xie, Shuhao Li, Yongzheng Zhanga +2
The proliferation of network attacks poses a significant threat. Researchers propose datasets for network attacks to support research in related fields. Then, many attack detection…
Detecting unknown HTTP-based malicious communication behavior via generated adversarial flows and hierarchical traffic features
Xiaochun Yun, Jiang Xie, Shuhao Li +2
Malicious communication behavior is the network communication behavior generated by malware (bot-net, spyware, etc.) after victim devices are infected. Experienced adversaries ofte…
Listen to Minority: Encrypted Traffic Classification for Class Imbalance with Contrastive Pre-Training
Xiang Li, Juncheng Guo, Qige Song +4
Mobile Internet has profoundly reshaped modern lifestyles in various aspects. Encrypted Traffic Classification (ETC) naturally plays a crucial role in managing mobile Internet, esp…