Tracing the Chain: Deep Learning for Stepping-Stone Intrusion Detection

ArXi:2604.08800v1 Announce Type: cross Stepping-stone intrusions (SSIs) are a prevalent network evasion technique in which attackers route sessions through chains of compromised intermediate hosts to obscure their origin. Effective SSI detection requires correlating the incoming and outgoing flows at each relay host at extremely low false positive rates -- a stringent requirement that renders classical statistical methods inadequate in operational settings.