Guo-Qiao Zhou

TrafficBASS: A Boundary-Aware Active Learning Framework for Endpoint Advanced Persistent Threat Detection

Advanced Persistent Threats (APTs) pose significant challenges to endpoint intrusion detection systems (IDSs) because their traffic often exhibits long-tail distributions, temporal evolution, boundary ambiguity, and concept drift. Endpoint deployment further suffers from scarce labeled samples and limited computational...