Event log analysis with the LogCluster tool. - Risto Vaarandi; Markus Kont; Mauno Pihelgas (MILCOM, 2016)

Creating and Detecting IPv6 Transition Mechanism-Based Information Exfiltration Covert Channels. - Bernhards Blumbergs; Mauno Pihelgas; Markus Kont; Olaf Maennel; Risto Vaarandi (NordSec, 2016)

Frankenstack: Toward real-time Red Team feedback. - Markus Kont; Mauno Pihelgas; Kaie Maennel; Bernhards Blumbergs; Toomas Lepik (MILCOM, 2017)

An unsupervised framework for detecting anomalous messages from syslog log files. - Risto Vaarandi; Bernhards Blumbergs; Markus Kont (NOMS, 2018)

Initial Reference Architecture of an Intelligent Autonomous Agent for Cyber Defense. - Alexander Kott; Luigi V. Mancini; Paul Théron; Martin Drasar; Edlira Dushku; Heiko Günther; Markus Kont; Benoît Leblanc; Agostino Panico; Mauno Pihelgas; Krzysztof Rzadca (CoRR, 2018)

Toward Intelligent Autonomous Agents for Cyber Defense: Report of the 2017 Workshop by the North Atlantic Treaty Organization (NATO) Research Group IST-152-RTG. - Alexander Kott; Ryan Thomas; Martin Drasar; Markus Kont; Alexander Poylisher; Benjamin A. Blakely; Paul Théron; Nathaniel Evans; Nandi Leslie; Rajdeep Singh; Maria Rigaki; Shanchieh Jay Yang; et al. (CoRR, 2018)

Frankenstack: Real-time Cyberattack Detection and Feedback System for Technical Cyber Exercises. - Mauno Pihelgas; Markus Kont (CSR, 2021)