Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments-Reference-Cited by-同舟云学术

Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments

Published:2024-07 Issue: Volume: Page:96-111
ISSN:
Container-title:Proceedings of the 19th ACM Asia Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Shen Xiangmin¹^ORCID,Li Zhenyuan²^ORCID,Burleigh Graham³^ORCID,Wang Lingzhi¹^ORCID,Chen Yan³^ORCID

Affiliation:

1. Northwestern University, Evanston, IL, United States of America

2. Zhejiang University, Hangzhou, Zhejiang, China

3. Northwestern University, Evanston, IL, USA

Funder

NSF (National Science Foundation)

Publisher

ACM

Reference45 articles.

1. [n. d.]. Endpoint Detection and Response Market Report. https://www.mordorintelligence.com/industry-reports/endpoint-detection-and-response-market

2. Bushra A. Alahmadi, Louise Axon, and Ivan Martinovic. 2022. 99% False Positives: A Qualitative Study of SOC Analysts' Perspectives on Security Alarms. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 2783--2800. https://www.usenix.org/conference/usenixsecurity22/presentation/alahmadi

3. Naif Saleh Almakhdhub, Abraham A. Clements, Mathias Payer, and Saurabh Bagchi. 2019. BenchIoT: A Security Benchmark for the Internet of Things. In 49th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN).

4. Abdulellah Alsaheel, Yuhong Nan, Shiqing Ma, Le Yu, Gregory Walkup, Z Berkay Celik, Xiangyu Zhang, and Dongyan Xu. 2021. ATLAS: A Sequence-based Learning Approach for Attack Investigation.. In USENIX Security Symposium. 3005--3022.

5. A Survey on Advanced Persistent Threats: Techniques, Solutions, Challenges, and Research Opportunities