Traditional Intrusion Detection Systems (IDS) cannot cope with the increasing number and
sophistication of cyberattacks such as Advanced Persistent Threats (APT). Due to their high …

With the alarmingly increasing rate of cybercrimes worldwide, there is a dire need to combat
cybercrimes timely and effectively. Cyberattacks on computing machines leave certain …

Endpoint monitoring solutions are widely deployed in today's enterprise environments to
support advanced attack detection and investigation. These monitors continuously record …

Causality analysis automates attack forensic and facilitates behavioral detection by
associating causally related but temporally distant system events. Despite its proven …

The broadening dependency and reliance that modern societies have on essential services
provided by Critical Infrastructures is increasing the relevance of their trustworthiness …

Software logging is the practice of recording different events and activities that occur within a
software system, which are useful for different activities such as failure prediction and …

An essential requirement for increasing human confidence in computer systems is knowing
an event's origin. Therefore, it is necessary to have an efficient method to record such …

In recent years, advanced persistent threats (APTs) have frequently occurred with increasing
severity on a global scale. Provenance graph-based APT detection systems have …

With the rapidly increasing volume of cyber-attacks over the past years due to the new
working-from-home paradigm, protecting hosts, networks, and individuals from cyber threats …

Advanced persistent threats are an emerging cyber threat to cyber‐physical systems (CPS),
especially those comprising mission‐critical physical assets. However, defense against such …