research
∙
08/09/2023
Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance
Provenance graphs are structured audit logs that describe the history of...
share
research
∙
08/03/2023
Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing
For safety reasons, unprivileged users today have only limited ways to c...
research
∙
12/16/2022
Resource-Interaction Graph: Efficient Graph Representation for Anomaly Detection
Security research has concentrated on converting operating system audit ...
research
∙
11/03/2021
Secure Namespaced Kernel Audit for Containers
Despite the wide usage of container-based cloud computing, container aud...
research
∙
03/23/2021
A large-scale study on research code quality and execution
This article presents a study on the quality and execution of research c...
research
∙
08/26/2020
SIGL: Securing Software Installations Through Deep Graph Learning
Many users implicitly assume that software can only be exploited after i...
research
∙
05/10/2020
Xanthus: Push-button Orchestration of Host Provenance Data Collection
Host-based anomaly detectors generate alarms by inspecting audit logs fo...
research
∙
01/22/2020
Tuneful: An Online Significance-Aware Configuration Tuner for Big Data Analytics
Distributed analytics engines such as Spark are a common choice for proc...
research
∙
01/06/2020
UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats
Advanced Persistent Threats (APTs) are difficult to detect due to their ...
research
∙
09/24/2019
ProvMark: A Provenance Expressiveness Benchmarking System
System level provenance is of widespread interest for applications such ...
research
∙
03/30/2019
Viewpoint | Personal Data and the Internet of Things: It is time to care about digital provenance
The Internet of Things promises a connected environment reacting to and ...
research
∙
08/18/2018
Runtime Analysis of Whole-System Provenance
Identifying the root cause and impact of a system intrusion remains a fo...
research
∙
06/04/2018
Provenance-based Intrusion Detection: Opportunities and Challenges
Intrusion detection is an arms race; attackers evade intrusion detection...
research
∙
11/30/2017
FRAPpuccino: Fault-detection through Runtime Analysis of Provenance
We present FRAPpuccino (or FRAP), a provenance-based fault detection mec...
research
∙
11/14/2017