Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools. - Feng Dong 008; Shaofei Li; Peng Jiang 007; Ding Li 001; Haoyu Wang 001; Liangyi Huang; Xusheng Xiao; Jiedong Chen; Xiapu Luo; Yao Guo 001; Xiangqun Chen (CCS, 2023)

NODLINK: An Online System for Fine-Grained APT Attack Detection and Investigation. - Shaofei Li; Feng Dong 008; Xusheng Xiao; Haoyu Wang 001; Fei Shao; Jiedong Chen; Yao Guo 001; Xiangqun Chen; Ding Li 001 (NDSS, 2024)