{"total":23,"rows":[{"id":"2308.05034","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","created":"2023-08-09","cited_by_count":31,"area":null},{"id":"2211.01753","title":"Looking Beyond IoCs: Automatically Extracting Attack Patterns from External CTI","created":"2022-11-01","cited_by_count":27,"area":null},{"id":"2111.04333","title":"threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning","created":"2021-11-08","cited_by_count":22,"area":null},{"id":"2310.09831","title":"MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning","created":"2023-10-15","cited_by_count":20,"area":null},{"id":"2104.08618","title":"EXTRACTOR: Extracting Attack Behavior from Threat Reports","created":"2021-04-17","cited_by_count":19,"area":null},{"id":"2307.10214","title":"Time for aCTIon: Automated Analysis of Cyber Threat Intelligence in the Wild","created":"2023-07-14","cited_by_count":15,"area":null},{"id":"2410.21060","title":"CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models","created":"2024-10-28","cited_by_count":14,"area":null},{"id":"2101.07769","title":"A System for Automated Open-Source Threat Intelligence Gathering and Management","created":"2021-01-19","cited_by_count":7,"area":null},{"id":"2510.15188","title":"OCR-APT: Reconstructing APT Stories from Audit Logs using Subgraph Anomaly Detection and LLMs","created":"2025-10-16","cited_by_count":6,"area":null},{"id":"2112.11032","title":"ANUBIS: A Provenance Graph-Based Framework for Advanced Persistent Threat Detection","created":"2021-12-21","cited_by_count":3,"area":null},{"id":"2503.03108","title":"OMNISEC: LLM-Driven Provenance-based Intrusion Detection via Retrieval-Augmented Behavior Prompting","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2211.05403","title":"Enabling Efficient Attack Investigation via Human-in-the-Loop Security Analysis","created":"2022-11-10","cited_by_count":2,"area":null},{"id":"2401.01883","title":"Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2410.09676","title":"Uncovering Attacks and Defenses in Secure Aggregation for Federated Deep Learning","created":"2024-10-13","cited_by_count":2,"area":null},{"id":"2504.07839","title":"Deep Learning-based Intrusion Detection Systems: A Survey","created":"2025-04-10","cited_by_count":2,"area":null},{"id":"2304.02838","title":"TBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph","created":"2023-04-06","cited_by_count":1,"area":null},{"id":"2504.12422","title":"Mitigating LLM Hallucinations with Knowledge Graphs: A Case Study","created":"2025-04-16","cited_by_count":1,"area":null},{"id":"2605.16714","title":"GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction","created":"2026-05-15","cited_by_count":1,"area":null},{"id":"2607.24563","title":"TRACE-CTI: Auditable Post-Extraction Governance of TTP Claims with Knowledge Graphs","created":"2026-07-27","cited_by_count":1,"area":null},{"id":"2509.26562","title":"DeepProv: Behavioral Characterization and Repair of Neural Networks via Inference Provenance Graph Analysis","created":"2025-09-30","cited_by_count":0,"area":null},{"id":"2605.07812","title":"GRASP -- Graph-Based Anomaly Detection Through Self-Supervised Classification","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2605.13337","title":"Context-Aware Web Attack Detection in Open-Source SIEM Systems via MITRE ATT&CK-Enriched Behavioral Profiling","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.20896","title":"GenAI-Driven Threat Detection with Microsoft Security Copilot","created":"2026-05-20","cited_by_count":0,"area":null}],"next_cursor":null}