Attack Reconstruction
Attack Reconstruction is a forensic methodology within incident response forensics that systematically analyzes and correlates digital evidence to re-create the sequence, tactics, and impact of a cyberattack, distinguishing itself by its focus on temporal accuracy, causality, and adversarial behavior modeling.
41
Publications
1.6K
Citations
125
Authors
67
Institutions
Publications per year
2017–2026
28
Parents
41
Towards Scalable Cluster Auditing through Grammatical Inference over Provenance Graphs
Wajih Ul Hassan, Mark Lemay, Nuraini Aguse et al. · 2018 · 129 citations · Full text
SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data
Nahid Hossain, Sadegh M. Milajerdi, Junao Wang et al. · arXiv (Cornell University) · 2018 · 92 citations · Full text
1–5 of 41
125
3
h-index
3
h-index
2
h-index
2
h-index
2
h-index
1–5 of 125
67
University of Alabama in Huntsville
Huntsville, United States
3 h-index
6 publications
146 citations

Beijing University of Technology
Beijing, China
3 h-index
10 publications
385 citations

Chinese Academy of Sciences
Beijing, China
2 h-index
5 publications
150 citations

University of Exeter
Exeter, United Kingdom
2 h-index
2 publications
53 citations
Institute of Information Engineering
Beijing, China
2 h-index
5 publications
150 citations
Stony Brook University
Stony Brook, United States
2 h-index
8 publications
556 citations
Northeast Electric Power University
Jilin City, China
2 h-index
8 publications
555 citations

The University of Adelaide
Adelaide, Australia
2 h-index
2 publications
114 citations
1–8 of 67
2 publications · 128 citations
2
h-index
JISA · 2 publications · 54 citations
2
h-index
1 publications · 71 citations
2
h-index
Repository · 1 publications · 92 citations
1
h-index
1 publications · 15 citations
1
h-index
1–5