Jian-Jin Zhao

Fine-Grained Threat Detection from Audit Logs via Dynamic Provenance Graph Learning

Advanced Persistent Threats (APTs) often involve long-term and multi-stage behaviors, making them difficult to detect from massive audit logs. Provenance graphs can capture causal relationships among system activities, but existing methods still face challenges in modeling entity-level temporal evolution and controllin...