52 citations · 79 across the 16 of their papers we have counts for
6 papers · 1 filter
CCR: Towards a Common, Quality-Gated CACAO Integrations Registry for European Cybersecurity Automation
Mateusz Zych, Vasileios Mavroeidis, Gudmund Grov
Standardised, machine-readable cybersecurity playbooks provide a basis for portable, shareable, and reusable incident-response logic. OASIS CACAO provides a vendor-neutral represen…
Towards Agentic Investigation of Security Alerts
Even Eilertsen, Vasileios Mavroeidis, Gudmund Grov
Security analysts are overwhelmed by the volume of alerts and the low context provided by many detection systems. Early-stage investigations typically require manual correlation ac…
Detecting and Eliminating Neural Network Backdoors Through Active Paths with Application to Intrusion Detection
Eirik Høyheim, Magnus Wiik Eckhoff, Gudmund Grov +2
Machine learning backdoors have the property that the machine learning model should work as expected on normal inputs, but when the input contains a specific , it…
A Graph-Based Approach to Alert Contextualisation in Security Operations Centres
Magnus Wiik Eckhoff, Peter Marius Flydal, Siem Peters +4
Interpreting the massive volume of security alerts is a significant challenge in Security Operations Centres (SOCs). Effective contextualisation is important, enabling quick distin…
LLM-Powered Intent-Based Categorization of Phishing Emails
Even Eilertsen, Vasileios Mavroeidis, Gudmund Grov
Phishing attacks remain a significant threat to modern cybersecurity, as they successfully deceive both humans and the defense mechanisms intended to protect them. Traditional dete…
Exploring reinforcement learning for incident response in autonomous military vehicles
Henrik Madsen, Gudmund Grov, Federico Mancini +2
Unmanned vehicles able to conduct advanced operations without human intervention are being developed at a fast pace for many purposes. Not surprisingly, they are also expected to s…