ProPatrol: Attack Investigation via Extracted High-Level Tasks-Reference-Cited by-同舟云学术

ProPatrol: Attack Investigation via Extracted High-Level Tasks

Published:2018 Issue: Volume: Page:107-126
ISSN:0302-9743
Container-title:Information Systems Security
language:
Short-container-title:

Author:

M. Milajerdi Sadegh,Eshete Birhanu,Gjomemo Rigel,Venkatakrishnan Venkat N.

Publisher

Springer International Publishing

Link

http://link.springer.com/content/pdf/10.1007/978-3-030-05171-6_6

Reference33 articles.

1. Multiprocess firefox. https://developer.mozilla.org/en-US/Firefox/Multiprocess_Firefox

2. Systemtap. https://sourceware.org/systemtap/

3. Bates, A., Tian, D.J., Butler, K.R., Moyer, T.: Trustworthy whole-system provenance for the Linux kernel. In: 24th USENIX Security Symposium (USENIX Security 2015), pp. 319–334 (2015)

4. Chow, J., Garfinkel, T., Chen, P.M.: Decoupling dynamic program analysis from execution in virtual environments. In: USENIX 2008 Annual Technical Conference on Annual Technical Conference, pp. 1–14 (2008)

5. Corporation, M.: Apt1: exposing one of china’s cyber espionage units. Technical report (2013)

Cited by 14 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. R-CAID: Embedding Root Cause Analysis within Provenance-based Intrusion Detection;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

2. eAudit: A Fast, Scalable and Deployable Audit Data Collection System^*;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. System Auditing for Real-Time Systems;ACM Transactions on Privacy and Security;2023-11-13

4. SoK: History is a Vast Early Warning System: Auditing the Provenance of System Intrusions;2023 IEEE Symposium on Security and Privacy (SP);2023-05

5. Classification and Analysis of Malicious Code Detection Techniques Based on the APT Attack;Applied Sciences;2023-02-23