Effective triage is of utmost importance for cybersecurity incident response, namely in
handling ransomware or similar incidents in which the attacker may use self-propagating …

It is difficult to discern real-world consequences of attacks on an enterprise when
investigating network-centric data alone. In recent years, many tools have been developed …

Cyber attacks are becoming more frequent and sophisticated, introducing significant
challenges for organizations to protect their systems and data from threat actors. Today …

With the rapid development of technology, connection to the internet is an indispensable
element of life. With the Covid-19 Pandemic outbreak, online education with a computer and …

Cyber operations is drowning in diverse, high-volume, multi-source data. To get a full picture
of current operations and identify malicious events and actors, analysts must see through …

Artificial intelligence (AI) techniques can significantly improve cyber security operations if
tasks and responsibilities are effectively shared between human and machine. AI …

In this paper, we describe a system for the continuous collection of data for the needs of
network security management. When a cybersecurity incident occurs in the network, the …

Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of
cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in …

The increasing number of cyberattacks against critical infrastructures has pushed
researchers to develop many Visual Analytics solutions to provide valid defensive …

Wide area monitoring systems (WAMSs) are used to measure synchrophasor data at
different locations and give operators a near-real-time picture of what is happening in the …