Provenance graphs are structured audit logs that describe the history of a system's
execution. Recent studies have explored a variety of techniques to analyze provenance …

Fileless attacks have gained significant prominence and have become the prevailing type of
attack in recent years. The exceptional level of stealthiness and difficulty in detection …

Large language models (LLMs) have strong capabilities in solving diverse natural language
processing tasks. However, the safety and security issues of LLM systems have become the …

In recent years, frequent Advanced Persistent Threat (APT) attacks have caused disastrous
damage to critical facilities, leading to severe information leakages, economic losses, and …

APT (Advanced Persistent Threat) with the characteristics of persistence, stealth, and
diversity is one of the greatest threats against cyber-infrastructure. As a countermeasure …

Enterprises and organizations are faced with potential threats from insider employees that
may lead to serious consequences. Previous studies on insider threat detection (ITD) mainly …

Recently, provenance-based Intrusion Detection Systems (IDSes) have gained popularity for
their potential in detecting sophisticated Advanced Persistent Threat (APT) attacks. These …

Modern cyber attackers use advanced zero-day exploits, highly targeted spear phishing,
and other social engineering techniques to gain access, and also use evasion techniques to …

Deep learning (DL) based anomaly detection has shown great promise in the field of
security due to its remarkable performance in various tasks. However, the issue of poor …

Abstract As Advanced Persistent Threats (APT) become increasingly complex and
destructive, security analysts often use log data for performing attack investigation. Existing …