Lateral movement (LM) is a principal, increasingly common, tactic in the arsenal of
advanced persistent threat (APT) groups and other less or more powerful threat actors. It …

Network infiltrations due to advanced persistent threats (APTs) have significantly grown in
recent years. Their primary objective is to gain unauthorized access to network assets …

This paper proposes a semi-supervised autoencoder with an auxiliary task (SAAT) to extract
a health feature space for power transformer fault diagnosis using dissolved gas analysis …

Insider threats have increasingly become a critical issue that modern enterprises and
organizations faced. They are mainly initiated by insider attackers, which may cause …

Within both the cyber kill chain and MITRE ATT&CK frameworks, Lateral Movement (LM) is
defined as any activity that allows adversaries to progressively move deeper into a system in …

Adversarial lateral movement via compromised accounts remains difficult to discover via
traditional rule-based defenses because it generally lacks explicit indicators of compromise …

Lateral movement (LM) is an umbrella term for techniques through which attackers spread
from an entry point to the rest of the network. Typically, LM involves both pivoting through …

Malicious login, especially lateral movement, has been a primary and costly threat for
enterprises. However, there exist two critical challenges in the existing methods. Specifically …

Authenticated lateral movement via compromised accounts is a common adversarial
maneuver that is challenging to discover with signature-or rules-based intrusion detection …

Lateral movement plays a vital role in a network attack campaign. After breaking into the
intranet, perpetrators penetrate to their final target through this procedure. In order to protect …