92 citations · 130 across the 3 of their papers we have counts for
3 papers
HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows
Sadegh M. Milajerdi, Rigel Gjomemo, Birhanu Eshete +2
In this paper, we present HOLMES, a system that implements a new approach to the detection of Advanced and Persistent Threats (APTs). HOLMES is inspired by several case studies of…
SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data
Md Nahid Hossain, Sadegh M Milajerdi, Junao Wang +5
We present an approach and system for real-time reconstruction of attack scenarios on an enterprise host. To meet the scalability and real-time needs of the problem, we develop a p…
Attack Analysis Results for Adversarial Engagement 1 of the DARPA Transparent Computing Program
Birhanu Eshete, Rigel Gjomemo, Md Nahid Hossain +5
This report presents attack analysis results of the first adversarial engagement event stream for the first engagement of the DARPA TC program conducted in October 2016. The analys…