StageFinder fuses graph neural networks on provenance data with LSTMs to estimate APT attack stages aligned with MITRE ATT&CK, achieving 0.96 macro F1 on DARPA datasets.
Modeling and detection of the multi-stages of advanced persistent threats attacks based on semi-supervised learning and complex network characteristics
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
Learning the APT Kill Chain: Temporal Reasoning over Provenance Data for Attack Stage Estimation
StageFinder fuses graph neural networks on provenance data with LSTMs to estimate APT attack stages aligned with MITRE ATT&CK, achieving 0.96 macro F1 on DARPA datasets.