Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis

Saimon Amanuel Tsegai, Xinyu Yang, Haoyuan Liu +1

System auditing is a vital technique for collecting system call events as system provenance and investigating complex multi-step attacks such as Advanced Persistent Threats. Howeve…