This is Why We Can't Cache Nice Things: Lightning-Fast Threat Hunting using Suspicion-Based Hierarchical Storage. - Wajih Ul Hassan; Ding Li 001; Kangkook Jee; Xiao Yu 007; Kexuan Zou; Dawei Wang; Zhengzhang Chen; Zhichun Li; Junghwan Rhee; Jiaping Gui; Adam Bates 001 (ACSAC, 2020)

You Are What You Do: Hunting Stealthy Malware via Data Provenance Analysis. - Qi Wang 017; Wajih Ul Hassan; Ding Li 001; Kangkook Jee; Xiao Yu 007; Kexuan Zou; Junghwan Rhee; Zhengzhang Chen; Wei Cheng 002; Carl A. Gunter; Haifeng Chen (NDSS, 2020)