Cyber threat hunting is the process of proactively and iteratively formulating and validating
threat hypotheses based on security-relevant observations and domain knowledge. To …

Serverless computing has freed developers from the burden of managing their own platform
and infrastructure, allowing them to rapidly prototype and deploy applications. Despite its …

Most attacks on the Internet are progressive attacks and exploit multiple multiple nodes.
Traditional Intrusion Detection Systems (IDS) cannot detect the original attack node, making …

Causality analysis automates attack forensic and facilitates behavioral detection by
associating causally related but temporally distant system events. Despite its proven …

Intrusion Detection Systems (IDS) secure all kinds of IT infrastructures through automatic
detection of malicious activities. Unfortunately, they are known to produce large numbers of …

Log analysis is a technique of deriving knowledge from log files containing records of events
in a computer system. A common application of log analysis is to derive critical information …

The form of spreading malware through end-users and thereby escalating and stealing data
in organizations is one of the attack techniques widely used by Advanced Persistent Threat …

Advanced persistent threats (APTs) pose significant security-related challenges to
organizations owing to their sophisticated and persistent nature, and are inimical to the …

The fast-growing Internet-of-Things (IoT) market has opened up a large threat landscape,
given the wide deployment of IoT devices in both consumer and commercial spaces. Attacks …

For system logs to aid in security investigations, they must be beyond the reach of the
adversary. Unfortunately, attackers that have escalated privilege on a host are typically able …