Multi-Stage Attack Detection via Kill Chain State Machines

26 March 2021

Papers citing "Multi-Stage Attack Detection via Kill Chain State Machines"

4 / 4 papers shown

Title
UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats Xueyuan Han Thomas Pasquier Adam Bates James W. Mickens Margo Seltzer 56 271 0 06 Jan 2020
HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows Sadegh M. Milajerdi Rigel Gjomemo Birhanu Eshete R. Sekar V. Venkatakrishnan 24 393 0 03 Oct 2018
SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data M. Hossain Sadegh M. Milajerdi Junao Wang Birhanu Eshete Rigel Gjomemo R. Sekar Scott D. Stoller V. Venkatakrishnan 26 217 0 06 Jan 2018
Practical Whole-System Provenance Capture Thomas Pasquier Xueyuan Han Mark Goldstein Thomas Moyer David Eyers Margo Seltzer J. Bacon 18 162 0 14 Nov 2017