Security event correlation approaches are necessary to detect and predict incremental
threats such as multi-step or targeted attacks (advanced persistent threats) and other causal …

Network Intrusion Detection Systems (NIDS) are designed to safeguard the security needs of
enterprise networks against cyber-attacks. However, NIDS networks suffer from several …

Ideal cyber threat intelligence (CTI) includes insights into attacker strategies that are specific
to a network under observation. Such CTI currently requires extensive expert input for …

This paper considers key challenges to using re-inforcement learning (RL) with attack
graphs to automate penetration testing in real-world applications from a systems …

Nowadays, new-generation threats often use multiple means or perform several steps to
intrude into networks and ultimately reach their objective. These new threats have multi …

Intrusion Detection Systems (IDSs) automatically analyze event logs and network traffic in
order to detect malicious activity and policy violations. Because IDSs have a large number of …

Blockchain merges technology with the Internet of Things (IoT) for addressing security and
privacy-related issues. However, conventional blockchain suffers from scalability issues due …

Attack graphs (AG) are used to assess pathways availed by cyber adversaries to penetrate a
network. State-of-the-art approaches for AG generation focus mostly on deriving …

Nowadays, advanced persistent threats (APTs) compromise critical large-scale networks
more frequently, however, detecting these APTs is difficult. Since security sensors often miss …

Cyber attack scenario reconstruction plays a crucial role in understanding and mitigating
security breaches. In this paper, we propose a novel framework that leverages Natural …