activity
20112026
most citedAutomatic Labeling for Entity Extraction in Cyber Security

73 citations · 354 across the 27 of their papers we have counts for

collaborators

31 papers

cs.CR2026

Prefilling the Reasoning Channel: Output-Prefix Attacks on Reasoning LLMs

Lukáš Brůna, Robert Bridges, Adam Ek

Large Language Models (LLMs) consume and produce a single sequence of text; hence, if text can be added to the beginning of the LLM's response, i.e., an output prefix, then all sub…

cs.CR2023★ 1 cited

AI ATAC 1: An Evaluation of Prominent Commercial Malware Detectors

Robert A. Bridges, Brian Weber, Justin M. Beaver +11

This work presents an evaluation of six prominent commercial endpoint malware detectors, a network malware detector, and a file-conviction algorithm from a cyber technology vendor.…

cs.CR2022★ 34 cited

Testing SOAR Tools in Use

Robert A. Bridges, Ashley E. Rice, Sean Oesch +11

Modern security operation centers (SOCs) rely on operators and a tapestry of logging and alerting tools with large scale collection and query abilities. SOC investigations are tedi…

cs.CR2022

Assembling a Cyber Range to Evaluate Artificial Intelligence / Machine Learning (AI/ML) Security Tools

Jeffrey A. Nichols, Kevin D. Spakes, Cory L. Watson +1

In this case study, we describe the design and assembly of a cyber security testbed at Oak Ridge National Laboratory in Oak Ridge, TN, USA. The range is designed to provide agile r…

cs.CR2022★ 11 cited

Detecting CAN Masquerade Attacks with Signal Clustering Similarity

Pablo Moriano, Robert A. Bridges, Michael D. Iannacone

Vehicular Controller Area Networks (CANs) are susceptible to cyber attacks of different levels of sophistication. Fabrication attacks are the easiest to administer -- an adversary…

cs.HC2021★ 1 cited

A Mathematical Framework for Evaluation of SOAR Tools with Limited Survey Data

Savannah Norem, Ashley E Rice, Samantha Erwin +3

Security operation centers (SOCs) all over the world are tasked with reacting to cybersecurity alerts ranging in severity. Security Orchestration, Automation, and Response (SOAR) t…