Výsledky vyhledávání - "Yuan, Qixuan"

Report

CRUcialG: Reconstruct Integrated Attack Scenario Graphs by Cyber Threat Intelligence Reports

Autor: Cheng, Wenrui, Zhu, Tiantian, Chen, Tieming, Yuan, Qixuan, Ying, Jie, Li, Hongmei, Xiong, Chunlin, Li, Mingda, Lv, Mingqi, Chen, Yan

Cyber Threat Intelligence (CTI) reports are factual records compiled by security analysts through their observations of threat events or their own practical experience with attacks. In order to utilize CTI reports for attack detection, existing metho

Externí odkaz: http://arxiv.org/abs/2410.11209

Zobrazit plný text záznamu

Report

Nip in the Bud: Forecasting and Interpreting Post-exploitation Attacks in Real-time through Cyber Threat Intelligence Reports

Autor: Zhu, Tiantian, Ying, Jie, Chen, Tieming, Xiong, Chunlin, Cheng, Wenrui, Yuan, Qixuan, Zheng, Aohan, Lv, Mingqi, Chen, Yan

Advanced Persistent Threat (APT) attacks have caused significant damage worldwide. Various Endpoint Detection and Response (EDR) systems are deployed by enterprises to fight against potential threats. However, EDR suffers from high false positives. I

Externí odkaz: http://arxiv.org/abs/2405.02826

Zobrazit plný text záznamu

Report

SPARSE: Semantic Tracking and Path Analysis for Attack Investigation in Real-time

Autor: Ying, Jie, Zhu, Tiantian, Cheng, Wenrui, Yuan, Qixuan, Ma, Mingjun, Xiong, Chunlin, Chen, Tieming, Lv, Mingqi, Chen, Yan

As the complexity and destructiveness of Advanced Persistent Threat (APT) increase, there is a growing tendency to identify a series of actions undertaken to achieve the attacker's target, called attack investigation. Currently, analysts construct th

Externí odkaz: http://arxiv.org/abs/2405.02629

Zobrazit plný text záznamu