4 papers
ProHunter: A Comprehensive APT Hunting System Based on Whole-System Provenance
Xuebo Qiu, Mingqi Lv, Yimei Zhang +2
Advanced Persistent Threats (APTs) remain difficult to detect due to their stealthy nature and long-term persistence. To tackle this challenge, provenance-based threat hunting has…
APT-MCL: An Adaptive APT Detection System Based on Multi-View Collaborative Provenance Graph Learning
Mingqi Lv, Shanshan Zhang, Haiwen Liu +2
Advanced persistent threats (APTs) are stealthy and multi-stage, making single-point defenses (e.g., malware- or traffic-based detectors) ill-suited to capture long-range and cross…
APT-CGLP: Advanced Persistent Threat Hunting via Contrastive Graph-Language Pre-Training
Xuebo Qiu, Mingqi Lv, Yimei Zhang +4
Provenance-based threat hunting identifies Advanced Persistent Threats (APTs) on endpoints by correlating attack patterns described in Cyber Threat Intelligence (CTI) with provenan…
CCSK:Cognitive Convection of Self-Knowledge Based Retrieval Augmentation for Large Language Models
Jianling Lu, Mingqi Lv, Tieming Chen
The performance of large language models (LLMs) in Q&A task increased substantially through Retrieval-Augmented Generation (RAG) which brings in external knowledge. However, the ma…