{"total":19,"rows":[{"id":"2308.05034","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","created":"2023-08-09","cited_by_count":31,"area":null},{"id":"2310.09831","title":"MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning","created":"2023-10-15","cited_by_count":20,"area":null},{"id":"2403.09209","title":"LAN: Learning Adaptive Neighbors for Real-Time Insider Threat Detection","created":"2024-03-14","cited_by_count":8,"area":null},{"id":"2401.05680","title":"Use of Graph Neural Networks in Aiding Defensive Cyber Operations","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2402.15147","title":"TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning","created":"2024-02-23","cited_by_count":6,"area":null},{"id":"2510.15188","title":"OCR-APT: Reconstructing APT Stories from Audit Logs using Subgraph Anomaly Detection and LLMs","created":"2025-10-16","cited_by_count":6,"area":null},{"id":"2503.03108","title":"OMNISEC: LLM-Driven Provenance-based Intrusion Detection via Retrieval-Augmented Behavior Prompting","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2504.07839","title":"Deep Learning-based Intrusion Detection Systems: A Survey","created":"2025-04-10","cited_by_count":2,"area":null},{"id":"2606.10281","title":"Benchmarking and Exploring the Capabilities of LLMs for Attack Investigations","created":"2026-06-09","cited_by_count":2,"area":null},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2601.22983","title":"PIDSMaker: Building and Evaluating Provenance-based Intrusion Detection Systems","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2605.21773","title":"HIDBench: Benchmarking Large Language Models for Host-Based Intrusion Detection","created":"2026-05-20","cited_by_count":1,"area":null},{"id":"2403.11830","title":"Problem space structural adversarial attacks for Network Intrusion Detection Systems based on Graph Neural Networks","created":"2024-03-18","cited_by_count":0,"area":null},{"id":"2406.05362","title":"RAPID: Robust APT Detection and Investigation Using Context-Aware Deep Learning","created":"2024-06-08","cited_by_count":0,"area":null},{"id":"2501.02981","title":"CONTINUUM: Detecting APT Attacks through Spatial-Temporal Graph Neural Networks","created":"2025-01-06","cited_by_count":0,"area":null},{"id":"2605.07812","title":"GRASP -- Graph-Based Anomaly Detection Through Self-Supervised Classification","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2606.04957","title":"NLLog: Lightweight, Explainable SOC Anomaly Detection via Log-to-Language Rewriting","created":"2026-06-03","cited_by_count":0,"area":null},{"id":"2608.01454","title":"How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2609.16462","title":"Not All Relations Are Equal: Relation-Balanced and Calibrated Graph Learning for Provenance-Based Intrusion Detection","created":"2026-09-15","cited_by_count":0,"area":null}],"next_cursor":null}