logo
CanyamAI summaries for academic research
language
MobileMobile
  • Phone FeatureWeChat Mini Program
EnglishEnglish
noticeNotice
BlogBlog
delete
arrow
Return

PathWatcher: A path-based behavior detection method for attack detection and investigation

delete2025-07-03
delete0
PRE
AI
Z
Zehui Wang
H
Hao Li
Y
Yinhao Qi
W
Wei Qiao
S
Song Liu
C
Chen Zhang
姜
姜波 (Bo Jiang) *
Z
Zhigang Lu
DOI：10.1016/j.cose.2025.104563delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Advanced Persistent Threats (APTs) comprise complex and stealthy attack techniques. Due to the characteristics of system audit logs in capturing system-level process calls and providing granular log data, using audit logs for causal analysis of advanced threat behaviors has become a popular solution. However, existing solutions still suffer from several deficiencies: (1) semantic gaps between raw data in low-level views and high-level system behaviors, (2) fatigue alert, and (3) poor interpretability and inferability.
Keywords:
Advanced Persistent Threats
System audit logs
Causal analysis
Semantic gap
Alert fatigue

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

No organization information available
Cited Papers

Cited Papers

No cited papers available