Yun-Chun Li

MotifTrace: multi-stage attack investigation via automated stage discovery and path reconstruction on provenance graphs

Abstract Multi-stage cyber attacks spanning extended periods pose significant challenges for security investigation, as analysts must reconstruct the complete attack sequence from voluminous system audit logs. Existing provenance graph-based investigation methods either rely on predefined attack knowledge to map activi...