AI RESEARCH
GRASP -- Graph-Based Anomaly Detection Through Self-Supervised Classification
arXiv CS.LG
•
ArXi:2605.07812v1 Announce Type: cross Advanced persistent threat (APT) attacks remain difficult to detect due to their stealth, adaptability, and use of legitimate system components. Provenance-based intrusion detection systems (PIDS) offer a promising defense by capturing detailed relationships between system components and actions. However, current PIDS rely on predefined or subset-determined thresholds, which limit detection stability and the ability to detect any anomalous behavior in general.