RAPID: Real-Time Alert Investigation with Context-aware Prioritization for Efficient Threat Discovery-Reference-Cited by-同舟云学术

RAPID: Real-Time Alert Investigation with Context-aware Prioritization for Efficient Threat Discovery

Published:2022-12-05 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 38th Annual Computer Security Applications Conference
language:
Short-container-title:

Author:

Liu Yushan¹^ORCID,Shu Xiaokui²^ORCID,Sun Yixin³^ORCID,Jang Jiyong²^ORCID,Mittal Prateek¹^ORCID

Affiliation:

1. Princeton University, United States of America

2. IBM Research, United States of America

3. University of Virginia, United States of America

Funder

DARPA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3564625.3567997

Reference48 articles.

1. 2003. Artificial Intelligence: A Modern Approach. (2003). 2003. Artificial Intelligence: A Modern Approach. (2003).

2. 2018. System Auditing RedHat Enterprise Linux 6. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/chap-system_auditing. 2018. System Auditing RedHat Enterprise Linux 6. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/chap-system_auditing.

3. 2019. Public exploits. https://www.hackingloops.com/exploit/. 2019. Public exploits. https://www.hackingloops.com/exploit/.

4. 2019. Zynga data breach. https://us.norton.com/internetsecurity-emerging-threats-new-report-says-zynga-breach-in-september-affected-172-million-a.html. 2019. Zynga data breach. https://us.norton.com/internetsecurity-emerging-threats-new-report-says-zynga-breach-in-september-affected-172-million-a.html.

5. 2020. APT Notes. https://github.com/aptnotes/data. 2020. APT Notes. https://github.com/aptnotes/data.

Cited by 9 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Alert Prioritisation in Security Operations Centres: A Systematic Survey on Criteria and Methods;ACM Computing Surveys;2024-09-14

2. Leveraging Large Language Models for the Auto-remediation of Microservice Applications: An Experimental Study;Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering;2024-07-10

3. Process-Aware Intrusion Detection in MQTT Networks;Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy;2024-06-19

4. Combating alert fatigue with AlertPro: Context-aware alert prioritization using reinforcement learning for multi-step attack detection;Computers & Security;2024-02

5. Enhancing Incident Management by an Improved Understanding of Data Exfiltration: Definition, Evaluation, Review;Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering;2024