How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection | Paper Citation Record

Observation 1b2534e7-e672-48d6-89e0-39727d96d701 · outbound

This paper cites Provenance-based in- trusion detection systems: A survey,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Provenance-based in- trusion detection systems: A survey,

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:52.691610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 98c97d73-1d67-43dd-b241-c19105a18bb5 · outbound

This paper cites Are we there yet? an industrial viewpoint on provenance-based endpoint detection and response tools,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Are we there yet? an industrial viewpoint on provenance-based endpoint detection and response tools,

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:52.490430Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 014bc13f-f0b5-4875-9526-f2dd8b852303 · outbound

This paper cites SLEUTH: Real-time attack scenario reconstruction from COTS audit data,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection SLEUTH: Real-time attack scenario reconstruction from COTS audit data,

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:52.345366Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 081d34ce-49d4-4d64-8413-551b679cffc5 · outbound

This paper cites HOLMES: Real-time APT detection through correlation of suspicious information flows,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection HOLMES: Real-time APT detection through correlation of suspicious information flows,

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:52.152844Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation b311dc26-245c-4469-84bb-8fb834565b0e · outbound

This paper cites Graph neural networks for intrusion detection: A survey,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Graph neural networks for intrusion detection: A survey,

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:52.012334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 28c913c6-7489-46f3-9d79-8b430dbdfe45 · outbound

This paper cites KAIROS: Practical intrusion detection and investigation using whole- system provenance,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection KAIROS: Practical intrusion detection and investigation using whole- system provenance,

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.852889Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 57564db8-8b78-48af-9613-782fb9a0d7de · outbound

This paper cites THREATRACE: Detecting and tracing host-based threats in node level through provenance graph learning,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection THREATRACE: Detecting and tracing host-based threats in node level through provenance graph learning,

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.729272Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation bfc4c7c5-d544-4ff6-886c-3f5ffdf1643f · outbound

This paper cites On the reproducibility of provenance-based intrusion detection that uses deep learning,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection On the reproducibility of provenance-based intrusion detection that uses deep learning,

Reference 8

Resolution: metadata mismatch; raw_fallback, observed 2026-08-06T00:12:45.932569Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation d583f4ce-ffed-4405-87ed-a29a8c0955f7 · outbound

This paper cites Sometimes simpler is better: A comprehensive analysis of state-of-the-art provenance-based intrusion detection systems,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Sometimes simpler is better: A comprehensive analysis of state-of-the-art provenance-based intrusion detection systems,

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.557232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation ffa7a138-40ae-4934-b34d-aae264bdb4fe · outbound

This paper cites What we talk about when we talk about logs: Understanding the effects of dataset quality on endpoint threat detection research,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection What we talk about when we talk about logs: Understanding the effects of dataset quality on endpoint threat detection research,

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.395012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 68a231a9-cf9c-4a5c-840e-8881cf72fbdb · outbound

This paper cites On the forensic validity of approximated audit logs,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection On the forensic validity of approximated audit logs,

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:41.816860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31df0c72-4f68-4d0e-b267-369010e1d746 · outbound

This paper cites Shortcut learning in deep neural networks,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Shortcut learning in deep neural networks,

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:41.908831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 398fe4c0-2b44-4991-aafe-276d73b4720e · outbound

This paper cites ORTHRUS: Achieving high quality of attribution in provenance-based intrusion detection systems,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection ORTHRUS: Achieving high quality of attribution in provenance-based intrusion detection systems,

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.201616Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a66f594c-388c-4de3-9a74-e21cd1251432 · outbound

This paper cites NoDoze: Combatting threat alert fatigue with automated provenance triage,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection NoDoze: Combatting threat alert fatigue with automated provenance triage,

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:51.060852Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 19e194f4-3f25-4c0e-88c3-7a1c44a28dbe · outbound

This paper cites Back-Propagating system dependency impact for attack investigation,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Back-Propagating system dependency impact for attack investigation,

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.921794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 309684a1-d780-40a6-ac80-03f61b054ede · outbound

This paper cites NODLINK: An online system for fine-grained apt attack detection and investigation,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection NODLINK: An online system for fine-grained apt attack detection and investigation,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.783299Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation fa5112cd-33b8-4f85-88ea-0ce5ab7a2755 · outbound

This paper cites Dos and don’ts of machine learning in computer security,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Dos and don’ts of machine learning in computer security,

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:42.219769Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b6e70a15-8dca-4536-bc71-b82b5e68ea24 · outbound

This paper cites Transparent computing engagement 3 data release,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Transparent computing engagement 3 data release,

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.587011Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 384d63fe-4220-43c8-b976-5998713fafec · outbound

This paper cites REAPr: Recovery every attack process,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection REAPr: Recovery every attack process,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.474000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 8082b64b-40cc-4ee0-a338-61ed37012353 · outbound

This paper cites ATLASv2: ATLAS Attack Engagements, Version 2.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection ATLASv2: ATLAS Attack Engagements, Version 2

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:42.400804Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba49a220-ad07-4dbd-89e8-7423264bf2a5 · outbound

This paper cites How to effectively trace provenance on windows endpoint detection & response telemetry,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection How to effectively trace provenance on windows endpoint detection & response telemetry,

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.244315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 4d9d56f6-bbcf-4e75-a50d-342b5b4e04e7 · outbound

This paper cites SPADE: Support for provenance auditing in distributed environments,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection SPADE: Support for provenance auditing in distributed environments,

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:50.075333Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 078e3ad3-9a76-42cc-ba7f-27878d15cde8 · outbound

This paper cites Practical whole-system provenance capture,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Practical whole-system provenance capture,

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.887090Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 1c389a06-d7c4-4039-9d82-197e15daa6d7 · outbound

This paper cites Trustworthy Whole- System provenance for the linux kernel,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Trustworthy Whole- System provenance for the linux kernel,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:42.724756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e5af8c3-4017-4041-8be1-eafd7dc0a266 · outbound

This paper cites Loggc: garbage collecting audit log,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Loggc: garbage collecting audit log,

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.714635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 5a2182e3-c245-4834-8eef-f96bde56f6a8 · outbound

This paper cites High accuracy attack provenance via binary-based execution partition,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection High accuracy attack provenance via binary-based execution partition,

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.523997Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 49df516c-23f0-4e9d-b3c9-c95197c068d2 · outbound

This paper cites High fidelity data reduction for big data security dependency analyses,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection High fidelity data reduction for big data security dependency analyses,

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:42.961980Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fa2f49b0-76b1-45e6-804e-a6b1c0886d99 · outbound

This paper cites Towards a timely causality analysis for enterprise security,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Towards a timely causality analysis for enterprise security,

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.364034Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 8864fcf1-f417-4aea-ba39-fce16ae2497d · outbound

This paper cites W ATSON: Abstracting behaviors from audit logs via aggregation of contextual semantics,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection W ATSON: Abstracting behaviors from audit logs via aggregation of contextual semantics,

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.247072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 2c8da824-15bc-41a8-8fdd-d3e75db6057b · outbound

This paper cites DeepLog: Anomaly detection and diagnosis from system logs through deep learning,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection DeepLog: Anomaly detection and diagnosis from system logs through deep learning,

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.138030Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation ca22fd31-f60c-4a52-8ee3-b7daa313a44d · outbound

This paper cites Logbert: Log anomaly detection via bert,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Logbert: Log anomaly detection via bert,

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:43.236308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 817068f6-d3c9-4b24-9c84-8fbf1f897b22 · outbound

This paper cites Unicorn: Runtime provenance-based detector for advanced persistent threats,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Unicorn: Runtime provenance-based detector for advanced persistent threats,

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:49.022650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation cbb42c45-b1e5-4c75-969d-bb37a4bf647e · outbound

This paper cites You are what you do: Hunting stealthy malware via data provenance analysis,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection You are what you do: Hunting stealthy malware via data provenance analysis,

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:48.902383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c347928f-6746-4ebb-8f42-dcb10f5e98e9 · outbound

This paper cites MAGIC: Detecting advanced persistent threats via masked graph representation learning,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection MAGIC: Detecting advanced persistent threats via masked graph representation learning,

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:48.736900Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation d9de7929-3d37-499f-ad09-65429f726d7e · outbound

This paper cites Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:48.530584Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 518464f2-9bf4-4cc5-950e-8ad3fe6978be · outbound

This paper cites R-caid: Embedding root cause analysis within provenance-based intrusion detection,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection R-caid: Embedding root cause analysis within provenance-based intrusion detection,

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:48.328184Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a660ef32-ceeb-4133-962d-4f96970811de · outbound

This paper cites The relationship between precision-recall and roc curves,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection The relationship between precision-recall and roc curves,

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:43.689445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 878e8b01-7f42-4ddd-9746-a07b099e58fa · outbound

This paper cites The precision-recall plot is more informa- tive than the ROC plot when evaluating binary classifiers on imbalanced datasets,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection The precision-recall plot is more informa- tive than the ROC plot when evaluating binary classifiers on imbalanced datasets,

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:48.133903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation eac5dabe-bbc9-43b9-a83b-f70be375ea83 · outbound

This paper cites The advantages of the Matthews correlation coefficient (MCC) over F1 score and accuracy in binary classification evaluation,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection The advantages of the Matthews correlation coefficient (MCC) over F1 score and accuracy in binary classification evaluation,

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.912820Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 9c6f43c3-6e4c-471b-8fb4-4836901aa0cf · outbound

This paper cites TESSERACT: Eliminating experimental bias in malware classification across space and time (extended version),.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection TESSERACT: Eliminating experimental bias in malware classification across space and time (extended version),

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.671281Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 5fcbca1c-a2d7-4a27-8582-b33706da386b · outbound

This paper cites SoK: Pragmatic assessment of machine learning for network intrusion detection,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection SoK: Pragmatic assessment of machine learning for network intrusion detection,

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.488415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation ce8503cc-bd4d-4196-8fc8-cda7aa5c144a · outbound

This paper cites Reporting score distributions makes a difference: Performance study of lstm-networks for sequence tagging,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Reporting score distributions makes a difference: Performance study of lstm-networks for sequence tagging,

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.372132Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation d797dbc1-fe65-44e4-aa57-8ae18cb42e19 · outbound

This paper cites Accounting for variance in machine learning benchmarks,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Accounting for variance in machine learning benchmarks,

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.271093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 30d1f2f5-e5b3-407c-b2ac-3aa28af46cf6 · outbound

This paper cites ATLAS: A sequence-based learning approach for attack investigation,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection ATLAS: A sequence-based learning approach for attack investigation,

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.122348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a5724c73-9983-40bb-bfb8-77df8c70a2d6 · outbound

This paper cites A new hope for darpa optc,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection A new hope for darpa optc,

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:47.023073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation cdae3c81-148e-4413-adc2-213d4c701500 · outbound

This paper cites A mathematical theory of communication,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection A mathematical theory of communication,

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:44.459624Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d41d2e39-d3ca-40b5-b797-9f851fe0009a · outbound

This paper cites Survivalism: Systematic analysis of Windows malware living- off-the-land,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Survivalism: Systematic analysis of Windows malware living- off-the-land,

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.913789Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation cc61a368-ea8c-416f-a613-4d0a5e386c39 · outbound

This paper cites Self-supervised learning of graph representations for network intrusion detection,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Self-supervised learning of graph representations for network intrusion detection,

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.747486Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 7fab8737-07e1-4e1b-a694-82727c9141be · outbound

This paper cites E- GraphSAGE: A graph neural network based intrusion detection system for IoT,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection E- GraphSAGE: A graph neural network based intrusion detection system for IoT,

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.594080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 39fae256-bedb-426e-b059-148129e59ebb · outbound

This paper cites Attention is all you need,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Attention is all you need,

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:44.758185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 465093ae-7a6d-4c2c-b48b-4b7642618196 · outbound

This paper cites Efficient Estimation of Word Representations in Vector Space.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Efficient Estimation of Word Representations in Vector Space

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:44.815942Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 517f5e5f-8ea7-44f5-b810-f0a53eca5e9e · outbound

This paper cites PIDSMaker: An ml framework for building provenance- based intrusion detection systems,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection PIDSMaker: An ml framework for building provenance- based intrusion detection systems,

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.454123Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c6ff909b-ad66-4dd9-b3f1-1b4b23daa5d2 · outbound

This paper cites MAGIC: Official implementation,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection MAGIC: Official implementation,

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.340069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c5d7783f-995e-4c65-94fc-d4a6b16c7930 · outbound

This paper cites PyTorch: An imperative style, high-performance deep learning library,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection PyTorch: An imperative style, high-performance deep learning library,

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:44.998573Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7acf3fce-6595-4174-b44a-f44838b9ed54 · outbound

This paper cites Fast Graph Representation Learning with PyTorch Geometric.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Fast Graph Representation Learning with PyTorch Geometric

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:45.066398Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0fe0935-6403-45dc-b53e-2e69506286a3 · outbound

This paper cites Decoupled weight decay regularization,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Decoupled weight decay regularization,

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:45.133827Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e814970b-1a85-4f59-ad7e-52324320c762 · outbound

This paper cites Datasheets for datasets,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Datasheets for datasets,

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.207367Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 7712aa8d-b2a5-43fc-af26-6b98f82b9b88 · outbound

This paper cites The Menlo Report: Ethical principles guiding information and communication technology research,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection The Menlo Report: Ethical principles guiding information and communication technology research,

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T00:12:46.080576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c8fc40f3-198a-4837-82cd-d7d1048d2491 · outbound

This paper cites Fast memory-efficient anomaly detection in streaming heterogeneous graphs,.

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection Fast memory-efficient anomaly detection in streaming heterogeneous graphs,

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:45.339878Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 682bef6d-5863-4aa0-bdcd-db50a4b18a78 · outbound

This paper cites TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version).

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version)

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-06T00:12:44.013859Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers