Slot: Provenance-Driven APT Detection through Graph Reinforcement Learning. - Wei Qiao 005; Yebo Feng; Teng Li 003; Zijian Zhang 001; Zhengzi Xu; Zhuo Ma 001; Yulong Shen 001; Jianfeng Ma 001; Yang Liu 118 (CoRR, 2024)

Winemaking: Extracting Essential Insights for Efficient Threat Detection in Audit Logs. - Weiheng Wu; Wei Qiao 005; Wenhao Yan; Bo Jiang 013; Yuling Liu; Baoxu Liu; Zhigang Lu 002; Junrong Liu (CoRR, 2024)

T-Trace: Constructing the APTs Provenance Graphs Through Multiple Syslogs Correlation. - Teng Li 003; Ximeng Liu; Wei Qiao 005; Xiongjie Zhu; Yulong Shen 001; Jianfeng Ma 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Slot: Provenance-Driven APT Detection through Graph Reinforcement Learning. - Wei Qiao 005; Yebo Feng; Teng Li 003; Zhuo Ma 001; Yulong Shen 001; Jianfeng Ma 001; Yang Liu 003 (CCS, 2025)

PanThreat: Global Resource-Based Anomaly Detection for APTs. - Wenhao Yan; Weiheng Wu; Bingsheng Bi; Wei Qiao 005; Bo Jiang 013; Yuling Liu; Junrong Liu (CSCWD, 2025)

Chaos: Robust Spatio-Temporal Fusion for Generalizable APT Provenance Tracing. - Teng Li 003; Wei Qiao 005; Yebo Feng; Jiahua Xu 002; Paolo Tasca; Weiguo Lin; Zexu Dang; Zhuo Ma 001; Jianfeng Ma 001 (DSPP (1), 2025)

DCASI: A Sequence-based Attack Investigation Method Using DTW Contrastive Learning. - Yun Li; Wei Qiao 005; Yan Zhu; Yunxiang Wang; Bo Jiang 013; Zhigang Lu 002 (ICASSP, 2025)

Brewing Vodka: Distilling Pure Knowledge for Lightweight Threat Detection in Audit Logs. - Weiheng Wu; Wei Qiao 005; Wenhao Yan; Bo Jiang 013; Yuling Liu; Baoxu Liu; Zhigang Lu 002; Junrong Liu (WWW, 2025)

Towards effective black-box attacks on DoH tunnel detection systems. - Linghao Li; Yan Zhu; Yun Li; Wei Qiao 005; Zelin Cui; Susu Cui; Bo Jiang 013; Zhigang Lu 002 (Comput. Networks, 2025)

PathWatcher: A path-based behavior detection method for attack detection and investigation. - Zehui Wang; Hao Li; Yinhao Qi; Wei Qiao 005; Song Liu; Chen Zhang; Bo Jiang 013; Zhigang Lu 002 (Comput. Secur., 2025)

SauronEyes: Disentangling Voluminous Logs to Unveil Camouflaged Attack Intentions. - Wei Qiao 005; Weiheng Wu; Song Liu; Yebo Feng; Zehui Wang; Junrong Liu; Teng Li 003; Bo Jiang 013; Zhigang Lu 002; Baoxu Liu (IEEE Trans. Inf. Forensics Secur., 2025)

Sentient: Multi-Scenario Behavioral Intent Analysis for Advanced Persistent Threat Detection. - Wenhao Yan; Ning An; Wei Qiao 005; Weiheng Wu; Bo Jiang 013; Yuling Liu; Zhigang Lu 002; Junrong Liu (CoRR, 2025)

ProvX: Generating Counterfactual-Driven Attack Explanations for Provenance-Based Detection. - Weiheng Wu; Wei Qiao 005; Teng Li 003; Yebo Feng; Zhuo Ma 001; Jianfeng Ma 001; Yang Liu 118 (CoRR, 2025)

Sentient: Detecting APTs via Capturing Indirect Dependencies and Behavioral Logic. - Wenhao Yan; Ning An; Wei Qiao 005; Weiheng Wu; Zhigang Lu 002; Bo Jiang 013; Baoxu Liu; Junrong Liu (AAAI, 2026)

Forge: A Robust Multi-tab Website Fingerprinting Attack via Blind Source Separation. - Yitan Huang; Wei Qiao 005; Ding Wang; Meng Shen 001; Di Zhao; Linxu Li; Susu Cui; Bo Jiang 013; Zhigang Lu 002; Baoxu Liu (WWW, 2026)