Cover Image

From Context to Rules: Toward Unified Detection Rule Generation

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Meng, Cheng, Le, Wenxin, Li, Xinyi, Wang, Qiuyun, Ren, Fangli, Jiang, Zhengwei, Liu, Baoxu
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection
by: Wang, Lingzhi, et al.
Published: (2024)

RulePilot: An LLM-Powered Agent for Security Rule Generation
by: Wang, Hongtai, et al.
Published: (2025)

Evaluating LLM Generated Detection Rules in Cybersecurity
by: Bertiger, Anna, et al.
Published: (2025)

RuleGenie: SIEM Detection Rule Set Optimization
by: Shukla, Akansha, et al.
Published: (2025)

Genos: General In-Network Unsupervised Intrusion Detection by Rule Extraction
by: Li, Ruoyu, et al.
Published: (2024)

Towards Personal Data Sharing Autonomy:A Task-driven Data Capsule Sharing System
by: Lyu, Qiuyun, et al.
Published: (2024)

Sentient: Detecting APTs Via Capturing Indirect Dependencies and Behavioral Logic
by: Yan, Wenhao, et al.
Published: (2025)

Generating API Parameter Security Rules with LLM for API Misuse Detection
by: Liu, Jinghua, et al.
Published: (2024)

CTI-REALM: Benchmark to Evaluate Agent Performance on Security Detection Rule Generation Capabilities
by: Chakraborty, Arjun, et al.
Published: (2026)

ProvAgent: Threat Detection Based on Identity-Behavior Binding and Multi-Agent Collaborative Attack Investigation
by: Yan, Wenhao, et al.
Published: (2026)

VerilogLAVD: LLM-Aided Rule Generation for Vulnerability Detection in Verilog
by: Long, Xiang, et al.
Published: (2025)

Winemaking: Extracting Essential Insights for Efficient Threat Detection in Audit Logs
by: Wu, Weiheng, et al.
Published: (2024)

GRIDAI: Generating and Repairing Intrusion Detection Rules via Collaboration among Multiple LLM-based Agents
by: Li, Jiarui, et al.
Published: (2025)

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs
by: Wudali, Prasanna N., et al.
Published: (2025)

SAT-BO: Verification Rule Learning and Optimization for FraudTransaction Detection
by: Luo, Mao, et al.
Published: (2025)

Anonymous YARA Rules Are Not Anonymous
by: Isah, Usman Rabiu, et al.
Published: (2026)

A Fully Local Last-Generated Rule in a Blockchain
by: Sakurai, Akira, et al.
Published: (2024)

ARuleCon: Agentic Security Rule Conversion
by: Xu, Ming, et al.
Published: (2026)

Detecting and Explaining Malware Family Evolution Using Rule-Based Drift Analysis
by: Jurečková, Olha, et al.
Published: (2026)

Adaptive Detection of Polymorphic Malware: Leveraging Mutation Engines and YARA Rules for Enhanced Security
by: Swami, Shreyansh, et al.
Published: (2025)

Trackly: A Unified SaaS Platform for User Behavior Analytics and Real Time Rule Based Anomaly Detection
by: Haque, Md Zahurul, et al.
Published: (2026)

AgentWatcher: A Rule-based Prompt Injection Monitor
by: Wang, Yanting, et al.
Published: (2026)

Characterizing the Modification Space of Signature IDS Rules
by: Guide, Ryan, et al.
Published: (2024)

Evolution of Log-Based Detection Rules in Public Repositories
by: Long, Minjun, et al.
Published: (2026)

FG-SAT: Efficient Flow Graph for Encrypted Traffic Classification under Environment Shifts
by: Cui, Susu, et al.
Published: (2024)

Ruling the Unruly: Designing Effective, Low-Noise Network Intrusion Detection Rules for Security Operations Centers
by: Teuwen, Koen T. W., et al.
Published: (2025)

A Large Language Model Approach to Generating Bypass Rules for Malware Evasion in Analysis Sandbox
by: Sui, Zhiyong, et al.
Published: (2026)

Demystifying the Role of Rule-based Detection in AI Systems for Windows Malware Detection
by: Ponte, Andrea, et al.
Published: (2025)

PhishSigma++: Malicious Email Detection with Typed Entity Relations
by: Shang, Shang, et al.
Published: (2026)

SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking
by: Li, Jindong, et al.
Published: (2026)

Tie-Breaking Rule Based on Partial Proof of Work in a Blockchain
by: Sakurai, Akira, et al.
Published: (2024)

Living off the Analyst: Harvesting Features from Yara Rules for Malware Detection
by: Gupta, Siddhant, et al.
Published: (2024)

QRS: A Rule-Synthesizing Neuro-Symbolic Triad for Autonomous Vulnerability Discovery
by: Tsigkourakos, George, et al.
Published: (2026)

SpamDam: Towards Privacy-Preserving and Adversary-Resistant SMS Spam Detection
by: Li, Yekai, et al.
Published: (2024)

DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents
by: Li, Hao, et al.
Published: (2025)

GAVEL: Towards Rule-Based Safety Through Activation Monitoring
by: Rozenfeld, Shir, et al.
Published: (2026)

Detecting Concept Drift in Evolving Malware Families Using Rule-Based Classifier Representations
by: Kalný, Tomáš, et al.
Published: (2026)

Distributed Intrusion Detection System using Semantic-based Rules for SCADA in Smart Grid
by: Mohan, Sathya Narayana, et al.
Published: (2024)

DP-RuL: Differentially-Private Rule Learning for Clinical Decision Support Systems
by: Lamp, Josephine, et al.
Published: (2024)

Automation of Smart Homes with Multiple Rule Sources
by: Eran, Kaufman, et al.
Published: (2024)