Imagen de Portada

Knowledge Transfer from LLMs to Provenance Analysis: A Semantic-Augmented Method for APT Detection

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Zuo, Fei, Rhee, Junghwan, Choe, Yung Ryn
Formato:	Preprint
Publicado:	2025
Materias:	Cryptography and Security
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Few-Shot Learning-Based Cyber Incident Detection with Augmented Context Intelligence
por: Zuo, Fei, et al.
Publicado: (2025)

BinSimDB: Benchmark Dataset Construction for Fine-Grained Binary Code Similarity Analysis
por: Zuo, Fei, et al.
Publicado: (2024)

APT-MCL: An Adaptive APT Detection System Based on Multi-View Collaborative Provenance Graph Learning
por: Lv, Mingqi, et al.
Publicado: (2026)

Slot: Provenance-Driven APT Detection through Graph Reinforcement Learning
por: Qiao, Wei, et al.
Publicado: (2024)

TFLAG:Towards Practical APT Detection via Deviation-Aware Learning on Temporal Provenance Graph
por: Jiang, Wenhan, et al.
Publicado: (2025)

ProHunter: A Comprehensive APT Hunting System Based on Whole-System Provenance
por: Qiu, Xuebo, et al.
Publicado: (2026)

P3GNN: A Privacy-Preserving Provenance Graph-Based Model for APT Detection in Software Defined Networking
por: Nazari, Hedyeh, et al.
Publicado: (2024)

Distributed Temporal Graph Learning with Provenance for APT Detection in Supply Chains
por: Tan, Zhuoran, et al.
Publicado: (2025)

OCR-APT: Reconstructing APT Stories from Audit Logs using Subgraph Anomaly Detection and LLMs
por: Aly, Ahmed, et al.
Publicado: (2025)

Exploring Answer Set Programming for Provenance Graph-Based Cyber Threat Detection: A Novel Approach
por: Li, Fang, et al.
Publicado: (2025)

The Procedural Semantics Gap in Structured CTI: A Measurement-Driven STIX Analysis for APT Emulation
por: Ferraz, Ágney Lopes Roth, et al.
Publicado: (2025)

TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning
por: Lv, Mingqi, et al.
Publicado: (2024)

Marlin: Knowledge-Driven Analysis of Provenance Graphs for Efficient and Robust Detection of Cyber Attacks
por: Li, Zhenyuan, et al.
Publicado: (2024)

ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
por: Fayyazi, Reza, et al.
Publicado: (2024)

SHIELD: APT Detection and Intelligent Explanation Using LLM
por: Gandhi, Parth Atulbhai, et al.
Publicado: (2025)

Learning the APT Kill Chain: Temporal Reasoning over Provenance Data for Attack Stage Estimation
por: Phan, Trung V., et al.
Publicado: (2026)

A Lightweight IDS for Early APT Detection Using a Novel Feature Selection Method
por: Shaker, Bassam Noori, et al.
Publicado: (2025)

LLM-Driven APT Detection for 6G Wireless Networks: A Systematic Review and Taxonomy
por: Golec, Muhammed, et al.
Publicado: (2025)

CLIProv: A Contrastive Log-to-Intelligence Multimodal Approach for Threat Detection and Provenance Analysis
por: Li, Jingwen, et al.
Publicado: (2025)

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis
por: Meng, Yuhan, et al.
Publicado: (2025)

SAGA: Synthetic Audit Log Generation for APT Campaigns
por: Huang, Yi-Ting, et al.
Publicado: (2024)

LLM-driven Provenance Forensics for Threat Investigation and Detection
por: Mukherjee, Kunal, et al.
Publicado: (2025)

APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models
por: Benabderrahmane, Sidahmed, et al.
Publicado: (2025)

CICAPT-IIOT: A provenance-based APT attack dataset for IIoT environment
por: Ghiasvand, Erfan, et al.
Publicado: (2024)

NeuroTrace: Inference Provenance-Based Detection of Adversarial Examples
por: Hmida, Firas Ben, et al.
Publicado: (2026)

ORCHID: Streaming Threat Detection over Versioned Provenance Graphs
por: Goyal, Akul, et al.
Publicado: (2024)

A Benign Activity Extraction Method for Malignant Activity Identification using Data Provenance
por: Saito, Taishin
Publicado: (2025)

OMNISEC: LLM-Driven Provenance-based Intrusion Detection via Retrieval-Augmented Behavior Prompting
por: Cheng, Wenrui, et al.
Publicado: (2025)

RAPID: Robust APT Detection and Investigation Using Context-Aware Deep Learning
por: Amaru, Yonatan, et al.
Publicado: (2024)

AdProv: A Method for Provenance of Process Adaptations
por: Stage, Ludwig, et al.
Publicado: (2025)

ProGQL: A Provenance Graph Query System for Cyber Attack Investigation
por: Shao, Fei, et al.
Publicado: (2025)

APT-ClaritySet: A Large-Scale, High-Fidelity Labeled Dataset for APT Malware with Alias Normalization and Graph-Based Deduplication
por: Yin, Zhenhao, et al.
Publicado: (2025)

Verifiable Provenance of Software Artifacts with Zero-Knowledge Compilation
por: Ron, Javier, et al.
Publicado: (2026)

ProvX: Generating Counterfactual-Driven Attack Explanations for Provenance-Based Detection
por: Wu, Weiheng, et al.
Publicado: (2025)

Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection
por: Wang, Lingzhi, et al.
Publicado: (2024)

HADES: Detecting Active Directory Attacks via Whole Network Provenance Analytics
por: Liu, Qi, et al.
Publicado: (2024)

TPPR: APT Tactic / Technique Pattern Guided Attack Path Reasoning for Attack Investigation
por: Sheng, Qi
Publicado: (2025)

A Cascade Approach for APT Campaign Attribution in System Event Logs: Technique Hunting and Subgraph Matching
por: Huang, Yi-Ting, et al.
Publicado: (2024)

APT-CGLP: Advanced Persistent Threat Hunting via Contrastive Graph-Language Pre-Training
por: Qiu, Xuebo, et al.
Publicado: (2025)

Enabling End-to-End APT Emulation in Industrial Environments: Design and Implementation of the SIMPLE-ICS Testbed
por: Pramadi, Yogha Restu, et al.
Publicado: (2026)