ProvPlug: LLM-Driven Plugins for Bridging Provenance Graph Host Intrusion Detection Systems and Graph Neural Networks
- 1 November 2026
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Dependable and Secure Computing
- Vol. 23 (6) , 13024-13041
Abstract
No abstract availableFunding Information
- Guangdong S&T Programme (2024B0101030002)
This publication has 35 references indexed in Scilit:
- A Survey of Large Language ModelsFrontiers of Computer Science, 2026
- Flash: A Comprehensive Approach to Intrusion Detection via Provenance Graph Representation Learning2024
- Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance2024
- SHADEWATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records2022
- Tactical Provenance Analysis for Endpoint Detection and Response Systems2020
- Combating Dependence Explosion in Forensic Analysis Using Alternative Tag Propagation Semantics2020
- HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows2019
- Deep Residual Learning for Image Recognition2016
- Deep learningNature, 2015
- Friends and neighbors on the WebSocial Networks, 2003