Publications

(2026). LARES: Host-centered Lateral Movement Detection via Inductive Graph Reasoning. IEEE ACSAC'26.
(2026). Inside Out: A Paradigm Shift In VM Introspection. USENIX OSDI'26.
(2025). Sometimes Simpler is Better: A Comprehensive Analysis of State-of-the-Art Provenance-Based Intrusion Detection Systems. USENIX Sec'25.
(2025). ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems. USENIX Sec'25.
(2025). On the Reproducibility of Provenance-based Intrusion Detection that uses Deep Learning. ACM REP'25.
PDF
(2024). SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions. ACM CCSW'24.