Andres Murillo

arxivcs.NIcs.AIcs.CRcs.MA2026-06-29

COHORT: Collaborative Orchestration for Hardening via Offensive Replay on Emulated Topologies

Chen Frydman, Aviram Zilberman, Rubin Krief, Abed Showgan, Andres Murillo, Sekiya Motoyoshi, et al.

Mitigating an observed adversary in an enterprise network typically takes weeks of expert work: an analyst derives a mitigation tailored to that adversary, validates it without breaking production, and verifies it disrupts the specific attack. The procedure relies on expert judgm…

View free PDFSource page

crossrefBig Data and Cognitive Computing2025-01-26Cited by 20

Labeling Network Intrusion Detection System (NIDS) Rules with MITRE ATT&CK Techniques: Machine Learning vs. Large Language Models

Nir Daniel, Florian Klaus Kaiser, Shay Giladi, Sapir Sharabi, Raz Moyal, Shalev Shpolyansky, et al.

Analysts in Security Operations Centers (SOCs) are often occupied with time-consuming investigations of alerts from Network Intrusion Detection Systems (NIDSs). Many NIDS rules lack clear explanations and associations with attack techniques, complicating the alert triage and the…

View free PDFSource page

COHORT: Collaborative Orchestration for Hardening via Offensive Replay on Emulated Topologies

Labeling Network Intrusion Detection System (NIDS) Rules with MITRE ATT&amp;CK Techniques: Machine Learning vs. Large Language Models

Labeling Network Intrusion Detection System (NIDS) Rules with MITRE ATT&CK Techniques: Machine Learning vs. Large Language Models