Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection

M. A. Bauer, “Programming by examples,” Artif. Intell. , vol. 12, no. 1, pp. 1–21, 1979

1979

Earlier work this paper cites.

O. Brdiczka, J. Liu, B. Price et al. , “Proactive insider threat detection through graph learning and psychological context,” in 2012 IEEE Symposium on Security and Privacy Workshops, San Francisco, CA, USA, May 24-25, 2012 . IEEE Computer Society, 2012, pp. 142–149

2012

Earlier work this paper cites.

G. Magklaras and S. Furnell, “The insider threat prediction and specification language,” in Ninth International Network Conference (INC 2012), Port Elizabeth, South Africa, July 11-12, 2012. Proceedings . University of Plymouth, 2012, pp. 51–61

2012

Earlier work this paper cites.

J. Glasser and B. Lindauer, “Bridging the gap: A pragmatic approach to generating insider threat data,” in 2013 IEEE Symposium on Security and Privacy Workshops, San Francisco, CA, USA, May 23-24, 2013 . IEEE Computer Society, 2013, pp. 98–104

2013

Earlier work this paper cites.

J. B. Camiña, R. Monroy, L. A. Trejo, and M. A. Medina-Pérez, “Temporal and spatial locality: An abstraction for masquerade detection,” IEEE Trans. Inf. Forensics Secur. , vol. 11, no. 9, pp. 2036–2051, 2016

2016

Earlier work this paper cites.

I. Agrafiotis, A. Erola, M. Goldsmith, and S. Creese, “A tripwire grammar for insider threat detection,” in Proceedings of the 8th ACM CCS International Workshop on Managing Insider Security Threats, MIST@CCS 2016, Vienna, Austria, October 28, 2016 . ACM, 2016, pp. 105–108

2016

Earlier work this paper cites.

M. Du, F. Li, G. Zheng, and V. Srikumar, “Deeplog: Anomaly detection and diagnosis from system logs through deep learning,” in CCS . ACM, 2017, pp. 1285–1298

2017

Earlier work this paper cites.

I. Homoliak, F. Toffalini, J. Guarnizo et al. , “Insight into insiders and IT: A survey of insider threat taxonomies, analysis, modeling, and countermeasures,” ACM Comput. Surv. , vol. 52, no. 2, pp. 30:1–30:40, 2019

2019

Earlier work this paper cites.

S. Yuan, P. Zheng, X. Wu, and Q. Li, “Insider threat detection via hierarchical neural temporal point processes,” in 2019 IEEE International Conference on Big Data (IEEE BigData), Los Angeles, CA, USA, December 9-12, 2019 . IEEE, 2019, pp. 1343–1350

2019

Earlier work this paper cites.

F. Liu, Y. Wen, D. Zhang et al. , “Log2vec: A heterogeneous graph embedding based approach for detecting cyber threats within enterprise,” in Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019, London, UK, November 11-15, 2019 , L. Cavallaro, J. Kinder, X. Wang, and J. Katz, Eds. ACM, 2019, pp. 1777–1794

2019

Earlier work this paper cites.

C. M. University, “Insider threat test dataset,” Sep 2020. [Online]. Available: https://kilthub.cmu.edu/articles/dataset/Insider_Threat_Test_Dataset/12841247

2020

Earlier work this paper cites.

C. Laprade, B. Bowman, and H. H. Huang, “Picodomain: A compact high-fidelity cybersecurity dataset,” CoRR , vol. abs/2008.09192, 2020

Original

2020

Earlier work this paper cites.

D. C. Le, N. Zincir-Heywood, and M. I. Heywood, “Training regime influences to semi-supervised learning for insider threat detection,” in IEEE Security and Privacy Workshops, SP Workshops 2021, San Francisco, CA, USA, May 27, 2021 . IEEE, 2021, pp. 13–18

2021

Cited alongside, same era.

S. Yuan and X. Wu, “Deep learning for insider threat detection: Review, challenges and opportunities,” Comput. Secur. , vol. 104, p. 102221, 2021

2021

Cited alongside, same era.

Y. Fang, C. Wang, Z. Fang, and C. Huang, “Lmtracker: Lateral movement path detection based on heterogeneous graph embedding,” Neurocomputing , vol. 474, pp. 37–47, 2022

2022

Cited alongside, same era.

X. Sun and J. Yang, “Hetglm: Lateral movement detection by discovering anomalous links with heterogeneous graph neural network,” in IEEE International Performance, Computing, and Communications Conference, IPCCC 2022, Austin, TX, USA, November 11-13, 2022 . IEEE, 2022, pp. 404–411

2022

Cited alongside, same era.

X. Yu, R. Shi, P. Feng et al. , “Leveraging partial symmetry for multi-agent reinforcement learning,” in AAAI . AAAI Press, 2024, pp. 17 583–17 590

2024

Closest in time.

X. Deng, L. Zhou, D. Dong et al. , “Enhancing multi-agent communication collaboration through gpt-based semantic information extraction and prediction,” in ACM-TURC . ACM, 2024

2024

Closest in time.

B. Ji, H. Liu, M. Du et al. , “Chain-of-thought improves text generation with citations in large language models,” in AAAI . AAAI Press, 2024, pp. 18 345–18 353

2024

Closest in time.

J. Xu, J. W. Stokes, G. McDonald et al. , “Autoattacker: A large language model guided system to implement automatic cyber-attacks,” CoRR , vol. abs/2403.01038, 2024

Original

2024

Closest in time.

R. Fang, R. Bindu, A. Gupta, and D. Kang, “LLM agents can autonomously exploit one-day vulnerabilities,” CoRR , vol. abs/2404.08144, 2024