308 citations · 634 across the 16 of their papers we have counts for
17 papers
Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance
Zijun Cheng, Qiujian Lv, Jinyuan Liang +4
Provenance graphs are structured audit logs that describe the history of a system's execution. Recent studies have explored a variety of techniques to analyze provenance graphs for…
Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing
Soo Yee Lim, Xueyuan Han, Thomas Pasquier
For safety reasons, unprivileged users today have only limited ways to customize the kernel through the extended Berkeley Packet Filter (eBPF). This is unfortunate, especially sinc…
Resource-Interaction Graph: Efficient Graph Representation for Anomaly Detection
James Pope, Jinyuan Liang, Vijay Kumar +13
Security research has concentrated on converting operating system audit logs into suitable graphs, such as provenance graphs, for analysis. However, provenance graphs can grow very…
Secure Namespaced Kernel Audit for Containers
Soo Yee Lim, Bogdan Stelea, Xueyuan Han +1
Despite the wide usage of container-based cloud computing, container auditing for security analysis relies mostly on built-in host audit systems, which often lack the ability to ca…
A large-scale study on research code quality and execution
Ana Trisovic, Matthew K. Lau, Thomas Pasquier +1
This article presents a study on the quality and execution of research code from publicly-available replication datasets at the Harvard Dataverse repository. Research code is typic…
SIGL: Securing Software Installations Through Deep Graph Learning
Xueyuan Han, Xiao Yu, Thomas Pasquier +5
Many users implicitly assume that software can only be exploited after it is installed. However, recent supply-chain attacks demonstrate that application integrity must be ensured…