Evolving techniques in cyber threat hunting: A systematic review

SMOTE synthetic minority over-sampling technique

Chawla, N. V., Bowyer, K. W., Hall, L. O., & Kegelmeyer, W. P. (2002) · Journal of Artificial Intelligence Research · doi:10.1613/jair.953 · Cited by 32,865 · see citing works

Learning from Imbalanced Data

He, H., & Garcia, E. A. (2009) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2008.239 · Cited by 10,359 · see citing works

Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization

Sharafaldin, I., Habibi Lashkari, A., & Ghorbani, A. A. (2018) · Proceedings of the 4th International Conference on Information Systems Security and Privacy · doi:10.5220/0006639801080116 · Cited by 5,318 · see citing works

Support Vector Data Description

Tax, D. M. J., & Duin, R. P. W. (2003) · Machine Learning · doi:10.1023/b:mach.0000008084.60811.49 · Cited by 3,553 · see citing works

A Survey on Evaluation of Large Language Models

Chang, Y., Wang, X., Wang, J., Wu, Y., Yang, L., Zhu, K., Chen, H., Yi, X., Wang, C., Wang, Y., et al. (2024) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3641289 · Cited by 2,842 · see citing works

A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks

Yin, C., Zhu, Y., Fei, J., & He, X. (2017) · IEEE Access · doi:10.1109/access.2017.2762418 · Cited by 2,100 · see citing works

DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning

Du, M., Li, F., Zheng, G., & Srikumar, V. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134015 · Cited by 1,835 · see citing works

Proceedings of the Web Conference 2021

(2021) · doi:10.1145/3442381 · Cited by 1,500 · see citing works

2013 IEEE International Conference on Big Data

(2013) · doi:10.1109/bigdata21311.2013 · Cited by 1,406 · see citing works

2014 IEEE Global Communications Conference

Masip Bruin, X., Ramirez, W., Siddiqui Shoaib, M., Serral Gracià, R., Montero Banegas, D. T., & Yannuzzi (2014) · doi:10.1109/globecom18177.2014 · Cited by 1,405 · see citing works

2014 IEEE Symposium on Security and Privacy

(2014) · doi:10.1109/sp16517.2014 · Cited by 1,388 · see citing works

Learning from Imbalanced Data Sets

Fernández, A., García, S., Galar, M., Prati, R. C., Krawczyk, B., & Herrera, F. (2018) · doi:10.1007/978-3-319-98074-4 · Cited by 1,349 · see citing works

IEEE Symposium on Security and Privacy

(2023) · IT Professional · doi:10.1109/mitp.2023.3246667 · Cited by 1,180 · see citing works

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security

(2018) · doi:10.1145/3243734 · Cited by 1,179 · see citing works

The 26th USENIX Security Symposium 2017

Αλεξόπουλος, Ν., Kiayias, A., Zacharias, T., & Talviste, R. (2017) · USENIX Security Symposium · Cited by 1,168 · see citing works

Artificial intelligence for cybersecurity: Literature review and future research directions

Kaur, R., Gabrijelčič, D., & Klobučar, T. (2023) · Information Fusion · doi:10.1016/j.inffus.2023.101804 · Cited by 615 · see citing works

Log clustering based problem identification for online service systems

Lin, Q., Zhang, H., Lou, J., Zhang, Y., & Chen, X. (2016) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/2889160.2889232 · Cited by 493 · see citing works

Proceedings of the 24th USENIX Conference on Security Symposium

Jung, J. (2015) · Cited by 465 · see citing works

A deep Recurrent Neural Network based approach for Internet of Things malware threat hunting

HaddadPajouh, H., Dehghantanha, A., Khayami, R., & Choo, K. R. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.03.007 · Cited by 450 · see citing works

2011 IEEE 27th International Conference on Data Engineering

(2011) · doi:10.1109/icde17924.2011 · Cited by 387 · see citing works

Cyber Threat Intelligence Mining for Proactive Cybersecurity Defense: A Survey and New Perspectives

Sun, N., Ding, M., Jiang, J., Xu, W., Mo, X., Tai, Y., & Zhang, J. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3273282 · Cited by 335 · see citing works

Cyber threat intelligence sharing: Survey and research directions

Wagner, T. D., Mahbub, K., Palomar, E., & Abdallah, A. (2019) · Computers & Security · doi:10.1016/j.cose.2019.101589 · Cited by 328 · see citing works

POIROT

Milajerdi, S. M., Eshete, B., Gjomemo, R., & Venkatakrishnan, V. N. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3363217 · Cited by 314 · see citing works

The ai-based cyber threat landscape: A survey

Kaloudi, N., & Li, J. (2021) · ACM Computing Surveys · doi:10.1145/3372823 · Cited by 310 · see citing works

Review of Classification Methods on Unbalanced Data Sets

Wang, L., Han, M., Li, X., Zhang, N., & Cheng, H. (2021) · IEEE Access · doi:10.1109/access.2021.3074243 · Cited by 310 · see citing works

The Role of Machine Learning in Cybersecurity

Apruzzese, G., Laskov, P., de, E. M., Mallouli, W., Búrdalo, L., Grammatopoulos, A. V., & Franco, F. D. (2022) · Digital Threats Research and Practice · doi:10.1145/3545574 · Cited by 291 · see citing works

2011 IEEE Symposium on Security and Privacy

(2011) · doi:10.1109/sp17706.2011 · Cited by 284 · see citing works

THREATRACE: Detecting and Tracing Host-Based Threats in Node Level Through Provenance Graph Learning

Wang, S., Wang, Z., Zhou, T., Sun, H., Yin, X., Han, D., Zhang, H., Shi, X., & Yang, J. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3208815 · Cited by 248 · see citing works

Adversarial Feature Selection Against Evasion Attacks

Zhang, F., Chan, P. P. K., Biggio, B., Yeung, D., & Roli, F. (2015) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2015.2415032 · Cited by 243 · see citing works

2021 IEEE European Symposium on Security and Privacy

(2021) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp51992.2021.00002 · Cited by 237 · see citing works

A hybrid unsupervised clustering-based anomaly detection method

Guo, P., Wang, L., Shen, J., & Dong, F. (2020) · Tsinghua Science & Technology · doi:10.26599/tst.2019.9010051 · Cited by 232 · see citing works

2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks

(2014) · doi:10.1109/dsn30607.2014 · Cited by 225 · see citing works

Know Abnormal, Find Evil: Frequent Pattern Mining for Ransomware Threat Hunting and Intelligence

Homayoun, S., Dehghantanha, A., Ahmadzadeh, M., Hashemi, S., & Khayami, S. R. (2017) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2017.2756908 · Cited by 218 · see citing works

Hybrid Intrusion Detection System Based on the Stacking Ensemble of C5 Decision Tree Classifier and One Class Support Vector Machine

Khraisat, A., Gondal, I., Vamplew, P. W., et al. (2020) · Electronics · doi:10.3390/electronics9010173 · Cited by 214 · see citing works

Proceedings of the 15th Conference of the European Chapter of the Association for Computational Linguistics: Volume 1, Long Papers

(2017) · doi:10.18653/v1/e17-1 · Cited by 210 · see citing works

A Review of Recent Advances, Challenges, and Opportunities in Malicious Insider Threat Detection Using Machine Learning Methods

Alzaabi, F. R., & Mehmood, A. (2024) · IEEE Access · doi:10.1109/access.2024.3369906 · Cited by 204 · see citing works

Block Hunter: Federated Learning for Cyber Threat Hunting in Blockchain-Based IIoT Networks

Yazdinejad, A., Dehghantanha, A., Parizi, R. M., Hammoudeh, M. A. A., Karimipour, H., & Srivastava, G. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3168011 · Cited by 201 · see citing works

Orchestration in Fog Computing: A Comprehensive Survey

Costa, B., Bachiega, J., de Carvalho, L. R., & Araújo, A. (2022) · ACM Computing Surveys · doi:10.1145/3486221 · Cited by 190 · see citing works

Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection

Li, D., & Li, Q. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3003571 · Cited by 178 · see citing works

An ensemble deep learning model for cyber threat hunting in industrial internet of things

Yazdinejad, A., Kazemi, M., Parizi, R. M., Dehghantanha, A., & Karimipour, H. (2022) · Digital Communications and Networks · doi:10.1016/j.dcan.2022.09.008 · Cited by 176 · see citing works

28th International Conference on Software Engineering

(2006) · Kybernetes · doi:10.1108/k.2006.06735aac.002 · Cited by 169 · see citing works

Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threats

Chen, Z., Liu, J., Shen, Y., Şimşek, M., Kantarcı, B., Mouftah, H. T., & Djukic, P. (2022) · ACM Computing Surveys · doi:10.1145/3530812 · Cited by 167 · see citing works

DIDarknet: A Contemporary Approach to Detect and Characterize the Darknet Traffic using Deep Image Learning

Lashkari, A. H., Kaur, G., & Rahali, A. (2020) · International Conference on Communication and Network Security (ICCNS) · doi:10.1145/3442520.3442521 · Cited by 164 · see citing works

A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience

Saeed, S., Suayyid, S. A., Al-Ghamdi, M. S., Al-Muhaisen, H., & Almuhaideb, A. M. (2023) · Sensors · doi:10.3390/s23167273 · Cited by 156 · see citing works

Using Bayesian Networks for Probabilistic Identification of Zero-Day Attack Paths

Sun, X., Dai, J., Liu, P., et al. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2018.2821095 · Cited by 143 · see citing works

DRTHIS: Deep ransomware threat hunting and intelligence system at the fog layer

Homayoun, S., Dehghantanha, A., Ahmadzadeh, M., Hashemi, S., Khayami, R., Choo, K. R., & Newton, D. E. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.07.045 · Cited by 143 · see citing works

Security Considerations for Internet of Things: A Survey

Jurcut, A. D., Niculcea, T., Ranaweera, P. S., & Le‐Khac, N. (2020) · SN Computer Science · doi:10.1007/s42979-020-00201-3 · Cited by 142 · see citing works

A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective

Schlette, D., Caselli, M., & Pernul, G. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3117338 · Cited by 134 · see citing works

Orchestrating the Development Lifecycle of Machine Learning-based IoT Applications: A Taxonomy and Survey

Qian, B., Su, J., Wen, Z., Jha, D. N., Li, Y., Guan, Y., Puthal, D., James, P., Yang, R., Zomaya, A. Y., et al. (2021) · ACM Computing Surveys · doi:10.1145/3398020 · Cited by 132 · see citing works

HinCTI: A Cyber Threat Intelligence Modeling and Identification System Based on Heterogeneous Information Network

Gao, Y., Li, X., Peng, H. M., Fang, B., & Yu, P. S. (2020) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2020.2987019 · Cited by 127 · see citing works

Unsupervised log message anomaly detection

Farzad, A., & Gulliver, T. A. (2020) · ICT Express · doi:10.1016/j.icte.2020.06.003 · Cited by 125 · see citing works

Recurrent Neural Network Model for IoT and Networking Malware Threat Detection

Woźniak, M., Siłka, J., Wieczorek, M., et al. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.3021689 · Cited by 125 · see citing works

2014 UKSim-AMSS 16th International Conference on Computer Modelling and Simulation

(2014) · doi:10.1109/uksim33854.2014 · Cited by 108 · see citing works

Network Traffic Anomaly Detection via Deep Learning

Fotiadou, K., Velivassaki, T.-H., Voulkidis, A. C., Skias, D., Tsekeridou, S., & Zahariadis, T. B. (2021) · Information · doi:10.3390/info12050215 · Cited by 103 · see citing works

Detection of zero-day attacks: An unsupervised port-based approach

Blaise, A., Bouet, M., Conan, V., et al. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107391 · Cited by 101 · see citing works

Classification model for accuracy and intrusion detection using machine learning approach

Agarwal, A., Sharma, P., Alshehri, M., Mohamed, A. A., & Alfarraj, O. (2021) · PeerJ Computer Science · doi:10.7717/peerj-cs.437 · Cited by 95 · see citing works

A network intrusion detection system based on convolutional neural network

Wang, H., Cao, Z., & Hong, B. (2020) · Journal of Intelligent & Fuzzy Systems · doi:10.3233/jifs-179833 · Cited by 93 · see citing works

An Enhanced Stacked LSTM Method With No Random Initialization for Malware Threat Hunting in Safety and Time-Critical Systems

Jahromi, A. N., Hashemi, S., Dehghantanha, A., Parizi, R. M., & Choo, K. R. (2020) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2019.2910243 · Cited by 92 · see citing works

DLTIF: Deep Learning-Driven Cyber Threat Intelligence Modeling and Identification Framework in IoT-Enabled Maritime Transportation Systems

Kumar, P., Gupta, G. P., Tripathi, R., Garg, S., & Hassan, M. M. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3122368 · Cited by 90 · see citing works

DeepAG: Attack Graph Construction and Threats Prediction With Bi-Directional Deep Learning

Li, T., Jiang, Y. L., Lin, C., Obaidat, M. S., Shen, Y., & Ma, J. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3143551 · Cited by 88 · see citing works

An adaptable deep learning-based intrusion detection system to zero-day attacks

Soltani, M., Ousat, B., Siavoshani, M. J., & Jahangir, A. H. (2023) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2023.103516 · Cited by 87 · see citing works

A Survey on Threat Hunting in Enterprise Networks

Nour, B., Pourzandi, M., & Debbabi, M. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3299519 · Cited by 87 · see citing works

Trailblazing the Artificial Intelligence for Cybersecurity Discipline

Samtani, S., Kantarcıoğlu, M., & Chen, H. (2020) · ACM Transactions on Management Information Systems · doi:10.1145/3430360 · Cited by 86 · see citing works

Mitigating adversarial evasion attacks of ransomware using ensemble learning

Ahmed, U., Lin, J. C., & Srivastava, G. (2022) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2022.107903 · Cited by 86 · see citing works

Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security

(2022) · doi:10.1145/3488932 · Cited by 82 · see citing works

International Conference on Electrical, Computer and Energy Technologies

(2023) · International Conference on Electrical, Computer and Energy Technologies (ICECET) · doi:10.1109/icecet58911.2023.10389303 · Cited by 78 · see citing works

Online Self-Supervised Deep Learning for Intrusion Detection Systems

Nakıp, M., & Erol Gelenbe, A. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3402148 · Cited by 76 · see citing works

What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey

Rahman, M. R., Mahdavi-Hezaveh, R., & Williams, L. A. (2022) · ACM Computing Surveys · doi:10.1145/3571726 · Cited by 70 · see citing works

LogUAD: Log Unsupervised Anomaly Detection Based on Word2Vec

Wang, J., Zhao, C., He, S., Gu, Y., Alfarraj, O., & Abugabah, A. (2021) · Computer Systems Science and Engineering · doi:10.32604/csse.2022.022365 · Cited by 66 · see citing works

Explainable Intelligence-Driven Defense Mechanism against Advanced Persistent Threats: A Joint Edge Game and AI Approach

Li, H., Wu, J., Xu, H., et al. (2021) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3130944 · Cited by 62 · see citing works

Adaptive online learning for IoT botnet detection

Shao, Z., Yuan, S., & Wang, Y. (2021) · Information Sciences · doi:10.1016/j.ins.2021.05.076 · Cited by 60 · see citing works

MILCOM 1984 - IEEE Military Communications Conference

(1984) · doi:10.1109/milcom.1984 · Cited by 58 · see citing works

2009 First International Workshop on Education Technology and Computer Science

(2009) · doi:10.1109/etcs15242.2009 · Cited by 52 · see citing works

A Game-Theoretic Analysis of Adversarial Classification

Dritsoula, L., Loiseau, P., & Musacchio, J. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2718494 · Cited by 52 · see citing works

Hunting for Insider Threats Using LSTM-Based Anomaly Detection

Villarreal-Vasquez, M., Modelo-Howard, G., Dube, S., & Bhargava, B. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3135639 · Cited by 52 · see citing works

Temporal feature aggregation with attention for insider threat detection from activity logs

Pal, P., Chattopadhyay, P., & Swarnkar, M. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.119925 · Cited by 52 · see citing works

Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing

(2023) · doi:10.1145/3555776 · Cited by 52 · see citing works

An analysis and classification of public information security data sources used in research and practice

Sauerwein, C., Pekaric, I., Felderer, M., et al. (2018) · Computers & Security · doi:10.1016/j.cose.2018.12.011 · Cited by 51 · see citing works

Attack Hypotheses Generation Based on Threat Intelligence Knowledge Graph

Kaiser, F. K., Dardik, U., Elitzur, A., Zilberman, P., Daniel, N., Wiens, M., Schultmann, F., Elovici, Y., & Puzis, R. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3233703 · Cited by 51 · see citing works

Euler : Detecting Network Lateral Movement via Scalable Temporal Link Prediction

King, I. J., & Huang, H. H. (2023) · ACM Transactions on Privacy and Security · doi:10.1145/3588771 · Cited by 50 · see citing works

Handling Insider Threat Through Supervised Machine Learning Techniques

Janjua, F., Masood, A., Abbas, H., & Rashid, I. (2020) · Procedia Computer Science · doi:10.1016/j.procs.2020.10.012 · Cited by 48 · see citing works

A Threat Hunting Framework for Industrial Control Systems

Jadidi, Z., & Lu, Y. (2021) · IEEE Access · doi:10.1109/access.2021.3133260 · Cited by 48 · see citing works

Federated Threat-Hunting Approach for Microservice-Based Industrial Cyber-Physical System

Abdel-Basset, M., Hawash, H., & Sallam, K. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3091150 · Cited by 47 · see citing works

Maat

Salem, A., Bănescu, S., & Pretschner, A. (2021) · ACM Transactions on Privacy and Security · doi:10.1145/3465361 · Cited by 47 · see citing works

Anomaly Detection in Cybersecurity Datasets via Cooperative Co-evolution-based Feature Selection

Rashid, A., Ahmed, M., Sikos, L. F., et al. (2022) · ACM Transactions on Management Information Systems · doi:10.1145/3495165 · Cited by 47 · see citing works

ANUBIS

Anjum, M. M., Iqbal, S., & Hamelin, B. (2022) · ACM/SIGAPP Symposium on Applied Computing (SAC) · doi:10.1145/3477314.3507097 · Cited by 44 · see citing works

APT beaconing detection: A systematic review

Talib, M. W. A., Nasir, Q., Nassif, A. B., et al. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102875 · Cited by 44 · see citing works

Traffic Based Sequential Learning During Botnet Attacks to Identify Compromised IoT Devices

Erol Gelenbe, A., & Nakıp, M. (2022) · IEEE Access · doi:10.1109/access.2022.3226700 · Cited by 43 · see citing works

Cyber intrusion detection through association rule mining on multi-source logs

Lou, P., Lu, G., Jiang, X., et al. (2020) · Applied Intelligence · doi:10.1007/s10489-020-02007-5 · Cited by 42 · see citing works

Self-Supervised Online and Lightweight Anomaly and Event Detection for IoT Devices

Abououf, M., Mizouni, R., Singh, S., Otrok, H., & Damiani, E. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3196049 · Cited by 40 · see citing works

Data-Driven Threat Hunting Using Sysmon

Mavroeidis, V., & Jøsang, A. (2018) · International Conference on Cryptography, Security and Privacy (CSP) · doi:10.1145/3199478.3199490 · Cited by 39 · see citing works

From TTP to IoC: Advanced Persistent Graphs for Threat Hunting

Berady, A., Jaume, M., Tông, V. V. T., et al. (2021) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2021.3056999 · Cited by 39 · see citing works

Deep AI-Powered Cyber Threat Analysis in IIoT

Bibi, I., Akhunzada, A., & Kumar, N. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3229722 · Cited by 38 · see citing works

Annotated probabilistic temporal logic

Shakarian, P., Parker, A., Simari, G. I., & Subrahmanian, V. V. S. (2011) · ACM Transactions on Computational Logic · doi:10.1145/1877714.1877720 · Cited by 37 · see citing works

Advanced Persistent Threat intelligent profiling technique: A survey

Tang, B., Wang, J., Yu, Z., Chen, B., Ge, W., Yu, J., & Lu, T. (2022) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2022.108261 · Cited by 37 · see citing works

Threat intelligence ATT&CK extraction based on the attention transformer hierarchical recurrent neural network

Liu, C., Wang, J., & Chen, X. (2022) · Applied Soft Computing · doi:10.1016/j.asoc.2022.108826 · Cited by 36 · see citing works

T-Trace: Constructing the APTs Provenance Graphs Through Multiple Syslogs Correlation

Li, T., Liu, X., Qiao, W., Zhu, X., Shen, Y., & Ma, J. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2023.3273918 · Cited by 34 · see citing works

APTHunter: Detecting Advanced Persistent Threats in Early Stages

Mahmoud, M., Mannan, M., & Youssef, A. (2022) · Digital Threats Research and Practice · doi:10.1145/3559768 · Cited by 33 · see citing works

CTI-SOC2M2 – The quest for mature, intelligence-driven security operations and incident response capabilities

Schlette, D., Vielberth, M., & Pernul, G. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102482 · Cited by 29 · see citing works

Threat Intelligence Quality Dimensions for Research and Practice

Zibak, A., Sauerwein, C., & Simpson, A. C. (2021) · Digital Threats Research and Practice · doi:10.1145/3484202 · Cited by 27 · see citing works

Generating Quality Threat Intelligence Leveraging OSINT and a Cyber Threat Unified Taxonomy

Martins, C., & Medeiros, I. (2022) · ACM Transactions on Privacy and Security · doi:10.1145/3530977 · Cited by 27 · see citing works

An XAI-based adversarial training approach for cyber-threat detection

Al-Essa, M., Andresini, G., Appice, A., & Malerba, D. (2022) · 2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc/picom/cbdcom/cy55231.2022.9927842 · Cited by 27 · see citing works

Semantic Cyberthreat Modelling.

Bromander, S., Jøsang, A., & Eian, M. (2016) · Cited by 23 · see citing works

Proceedings of the 2nd International Conference on Cryptography, Security and Privacy

(2018) · doi:10.1145/3199478 · Cited by 23 · see citing works

Proceedings of the 2016 ACM on Workshop on Information Sharing and Collaborative Security

(2016) · doi:10.1145/2994539 · Cited by 22 · see citing works

2012 European Intelligence and Security Informatics Conference

(2012) · doi:10.1109/eisic20576.2012 · Cited by 22 · see citing works

Multi-datasource machine learning in intrusion detection: Packet flows, system logs and host statistics

Lin, Y., Wang, Z., Lin, P., Nguyen, V.-L., Hwang, R., & Lai, Y. (2022) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2022.103248 · Cited by 22 · see citing works

Cyber threat detection: Unsupervised hunting of anomalous commands (UHAC)

Kayhan, V. O., Agrawal, M., & Shivendu, S. (2023) · Decision Support Systems · doi:10.1016/j.dss.2023.113928 · Cited by 21 · see citing works

Attack scenario reconstruction via fusing heterogeneous threat intelligence

Zang, X., Gong, J., Zhang, X., et al. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103420 · Cited by 21 · see citing works

Enhancements to Threat, Vulnerability, and Mitigation Knowledge for Cyber Analytics, Hunting, and Simulations

Hemberg, E., Turner, M. J., Rutar, N., et al. (2023) · Digital Threats Research and Practice · doi:10.1145/3615668 · Cited by 21 · see citing works

Proceedings of the 2nd ACM Workshop on Information Sharing and Collaborative Security

(2015) · doi:10.1145/2808128 · Cited by 20 · see citing works

Clustering Analysis for Malware Behavior Detection using Registry Data

Rosli, N. A., Yassin, W. M., Faizal, M. A., et al. (2019) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2019.0101213 · Cited by 20 · see citing works

UN-AVOIDS: Unsupervised and Nonparametric Approach for Visualizing Outliers and Invariant Detection Scoring

Yousef, W. A., Traoré, I., & Briguglio, W. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3125608 · Cited by 20 · see citing works

Learning Latent Events From Network Message Logs

Satpathi, S., Deb, S., Srikant, R., et al. (2019) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2019.2930040 · Cited by 19 · see citing works

Neural networks-based data hiding in digital images: Overview

Dzhanashia, K., & Evsutin, O. O. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127499 · Cited by 19 · see citing works

Cyber Threat Hunting Through Automated Hypothesis and Multi-Criteria Decision Making

Horta, A., & dos Santos, A. F. P. (2020) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata50022.2020.9378213 · Cited by 17 · see citing works

Investigating Sharing of Cyber Threat Intelligence and Proposing A New Data Model for Enabling Automation in Knowledge Representation and Exchange

Bromander, S., Swimmer, M., Muller, L. P., et al. (2021) · Digital Threats Research and Practice · doi:10.1145/3458027 · Cited by 17 · see citing works

Proceedings of the Third International Conference on Trends in Information, Telecommunication and Computing

Das, V. V. (2012) · Lecture notes in electrical engineering · doi:10.1007/978-1-4614-3363-7 · Cited by 16 · see citing works

Security and Privacy in Communication Networks

García-Alfaro, J., Li, S., Poovendran, R., et al. (2021) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-90019-9 · Cited by 16 · see citing works

Architecting threat hunting system based on the DODAF framework

Aghamohammadpour, A., Mahdipour, E., & Attarzadeh, I. (2022) · The Journal of Supercomputing · doi:10.1007/s11227-022-04808-6 · Cited by 16 · see citing works

Exploring topic models to discern cyber threats on Twitter: A case study on Log4Shell

Wang, Y., Bashar, M. A., Chandramohan, M., & Nayak, R. (2023) · Intelligent Systems with Applications · doi:10.1016/j.iswa.2023.200280 · Cited by 16 · see citing works

Building Machine Learning-based Threat Hunting System from Scratch

Chen, C.-K., Lin, S.-C., Huang, S.-C., Chu, Y.-T., Lei, C., & Huang, C. (2021) · Digital Threats Research and Practice · doi:10.1145/3491260 · Cited by 15 · see citing works

2014 11th International ISC Conference on Information Security and Cryptology

(2014) · doi:10.1109/iscisc34202.2014 · Cited by 12 · see citing works

C-BEDIM and S-BEDIM: Lateral movement detection in enterprise network through behavior deviation measurement

Dong, C., Yang, J., Liu, S., Wang, Z., Liu, Y., & Lü, Z. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103267 · Cited by 12 · see citing works

Image watermarking based on a ratio of DCT coefficient sums using a gradient-based optimizer

Сергеевна, М. А., & Evsutin, O. O. (2024) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2024.109271 · Cited by 12 · see citing works

Information Systems Security and Privacy

(2018) · Communications in computer and information science · doi:10.1007/978-3-319-93354-2 · Cited by 10 · see citing works

LogKernel: A Threat Hunting Approach Based on Behaviour Provenance Graph and Graph Kernel Clustering

Li, J., Zhang, R., Liu, J., & Liu, G. (2022) · Security and Communication Networks · doi:10.1155/2022/4577141 · Cited by 9 · see citing works

An Automated Intrusion Detection and Prevention Model for Enhanced Network Security and Threat Assessment

Prabu, K., & Sudhakar, P. (2023) · International Journal of Computer Networks And Applications · doi:10.22247/ijcna/2023/223316 · Cited by 8 · see citing works

procmonML: Generating evasion resilient host-based behavioral analytics from tree ensembles

Mikhail, J. W., Williams, J. C., & Roelke, G. R. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102002 · Cited by 7 · see citing works

MABAT: A Multi-Armed Bandit Approach for Threat-Hunting

Dekel, L., Leybovich, I., Zilberman, P., et al. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3215010 · Cited by 7 · see citing works

IP traffic behavior characterization via semantic mining

Zang, X., Gong, J., Wang, M., Gao, P., & Zhang, G. (2023) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2023.103603 · Cited by 7 · see citing works

Threat hunting: assuming the worst to strengthen resilience

Mansfield-Devine, S. (2017) · Network Security · doi:10.1016/s1353-4858(17)30050-8 · Cited by 5 · see citing works

Mobile, Secure, and Programmable Networking

Bouzefrane, S., Laurent, M., Boumerdassi, S., et al. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-67550-9 · Cited by 4 · see citing works

Proceedings of the 2022 International Symposium on Memory Systems

(2022) · doi:10.1145/3565053 · Cited by 3 · see citing works

Mapping of Industrial IoT to IEC 62443 Standards

Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · Sensors · doi:10.3390/s25030728 · Cited by 29 · see citing works

ИСПОЛЬЗОВAНИЕ ПОТЕНЦИAЛA СОЦИAЛЬНЫХ ПAРТНЕРОВ В ПОДГОТОВКЕ БУДУЩИХ ПЕДAГОГОВ

Атабекова, Б. Б. (2024) · Habaršy. Pedagogika ġylymdary seriâsy · doi:10.51889/2959-5762.2023.80.4.019

Susquehanna Chorale Spring Concert "Roots and Wings"

Hawkins, D. (2017)

Using DataGrid Control to Realize DataBase of Querying in VB6.0

Hu, S. (2000) · Modern Computer

ESKVS: efficient and secure approach for keyframes-based video summarization framework

Saini, P., & Berwal, K. (2024) · Multimedia Tools and Applications · doi:10.1007/s11042-024-18405-7 · Cited by 10 · see citing works

Study and Two Types of Typical Usage of DataGrid Web Server Control

Hai-tao, L. (2005) · Modern Computer