{"total":33,"rows":[{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2308.05034","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","created":"2023-08-09","cited_by_count":31,"area":null},{"id":"2111.04333","title":"threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning","created":"2021-11-08","cited_by_count":22,"area":null},{"id":"2310.09831","title":"MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning","created":"2023-10-15","cited_by_count":20,"area":null},{"id":"2305.00550","title":"SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detection","created":"2023-04-30","cited_by_count":13,"area":null},{"id":"2402.15147","title":"TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning","created":"2024-02-23","cited_by_count":6,"area":null},{"id":"2510.15188","title":"OCR-APT: Reconstructing APT Stories from Audit Logs using Subgraph Anomaly Detection and LLMs","created":"2025-10-16","cited_by_count":6,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2106.05332","title":"Reinforcement Learning for Industrial Control Network Cyber Security Orchestration","created":"2021-06-09","cited_by_count":3,"area":null},{"id":"2112.11032","title":"ANUBIS: A Provenance Graph-Based Framework for Advanced Persistent Threat Detection","created":"2021-12-21","cited_by_count":3,"area":null},{"id":"2503.03108","title":"OMNISEC: LLM-Driven Provenance-based Intrusion Detection via Retrieval-Augmented Behavior Prompting","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2211.05403","title":"Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis","created":"2022-11-10","cited_by_count":2,"area":null},{"id":"2401.01883","title":"Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2504.07839","title":"Deep Learning-based Intrusion Detection Systems: A Survey","created":"2025-04-10","cited_by_count":2,"area":null},{"id":"2104.10319","title":"Evidential Cyber Threat Hunting","created":"2021-04-21","cited_by_count":1,"area":null},{"id":"2304.02838","title":"TBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph","created":"2023-04-06","cited_by_count":1,"area":null},{"id":"2306.00934","title":"Interpreting GNN-based IDS Detections Using Provenance Graph Structural Features","created":"2023-06-01","cited_by_count":1,"area":null},{"id":"2405.04691","title":"Carbon Filter: Real-time Alert Triage Using Large Scale Clustering and Fast Search","created":"2024-05-07","cited_by_count":1,"area":null},{"id":"2601.22983","title":"PIDSMaker: Building and Evaluating Provenance-based Intrusion Detection Systems","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2108.02713","title":"Role-based lateral movement detection with unsupervised learning","created":"2021-08-05","cited_by_count":0,"area":null},{"id":"2112.08986","title":"A Heterogeneous Graph Learning Model for Cyber-Attack Detection","created":"2021-12-16","cited_by_count":0,"area":null},{"id":"2311.05733","title":"LogShield: A Transformer-based APT Detection System Leveraging Self-Attention","created":"2023-11-09","cited_by_count":0,"area":null},{"id":"2406.05362","title":"RAPID: Robust APT Detection and Investigation Using Context-Aware Deep Learning","created":"2024-06-08","cited_by_count":0,"area":null},{"id":"2502.05367","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","created":"2025-02-07","cited_by_count":0,"area":null},{"id":"2509.26562","title":"DeepProv: Behavioral Characterization and Repair of Neural Networks via Inference Provenance Graph Analysis","created":"2025-09-30","cited_by_count":0,"area":null},{"id":"2510.26307","title":"A Survey of Heterogeneous Graph Neural Networks for Cybersecurity Anomaly Detection","created":"2025-10-30","cited_by_count":0,"area":null},{"id":"2512.18199","title":"PROVEX: Enhancing SOC Analyst Trust with Explainable Provenance-Based IDS","created":"2025-12-20","cited_by_count":0,"area":null},{"id":"2605.07812","title":"GRASP -- Graph-Based Anomaly Detection Through Self-Supervised Classification","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2605.20896","title":"GenAI-Driven Threat Detection with Microsoft Security Copilot","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2605.26679","title":"Certified Causal Attribution for Real-Time Attack Forensics in 6G Network Slicing","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2608.01454","title":"How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2609.16462","title":"Not All Relations Are Equal: Relation-Balanced and Calibrated Graph Learning for Provenance-Based Intrusion Detection","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.38954","title":"APTInvestBench: Evaluating Autonomous APT Investigation under Varying Telemetry","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}