Security event correlation approaches are necessary to detect and predict incremental
threats such as multi-step or targeted attacks (advanced persistent threats) and other causal …

Detecting anomalies in dynamic graphs is a vital task, with numerous practical applications
in areas such as security, finance, and social media. Existing network embedding based …

The task of root cause analysis (RCA) is to identify the root causes of system faults/failures
by analyzing system monitoring data. Efficient RCA can greatly accelerate system failure …

Security Operations Centres (SOCs) are specialised facilities where security analysts
leverage advanced technologies to monitor, detect and respond to cyber incidents …

Information systems have widely been the target of malware attacks. Traditional signature-
based malicious program detection algorithms can only detect known malware and are …

Given the prior information of the target, hyperspectral target detection focuses on exploiting
spectral differences to separate objects of interest from the background, which can be …

Anomaly detection is an important data mining task with numerous applications, such as
intrusion detection, credit card fraud detection, and video surveillance. However, given a …

In large-scale online service system, to enhance the quality of services, engineers need to
collect various monitoring data and write many rules to trigger alerts. However, the number …

Program or process is an integral part of almost every IT/OT system. Can we trust the
identity/ID (eg, executable name) of the program? To avoid detection, malware may disguise …

Information systems have widely been the target of malware attacks. Traditional signature-
based malicious program detection algorithms can only detect known malware and are …