In this article we consider the problem of defending against increasing data exfiltration
threats in the domain of cybersecurity. We review existing work on exfiltration threats and …

Following the recent advances in wireless communication leading to increased Internet of
Things (IoT) systems, many security threats are currently ravaging IoT systems, causing …

Contemporary security information and event management (SIEM) solutions struggle to
identify critical security incidents effectively due to the overwhelming number of false alerts …

Significant efforts have been investigated to develop machine learning (ML) based tools to
support security operations. However, they still face key challenges in practice. A generally …

Intrusion analysis is essential for cybersecurity, but oftentimes, the overwhelming number of
false alerts issued by security appliances can prove to be a considerable hurdle. Machine …

As various types of network threats have increased recently, manual threat response by
security analysts has become a limitation. To compensate for this, the importance of security …

Identifying datapoints that substantially differ from normality is the task of anomaly detection
(AD). While AD has gained widespread attention in rich data domains such as images …

The extraordinary number of alerts generated by network intrusion detection systems (NIDS)
can desensitize security analysts tasked with incident response. Security information and …

Alert fatigue problems can have serious consequences for the enterprise security. When
analysts become overwhelmed by the sheer number of alerts, high-risk alerts may go …

This work proposes a new class of proactive attacks called the Informational Denial-of-
Service (IDoS) attacks that exploit the attentional human vulnerability. By generating a large …