Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Near Real-time Learning and Extraction of Attack Models from Intrusion
  Alerts   Critical and sophisticated cyberattacks often take multitudes of
reconnaissance, exploitations, and obfuscation techniques to penetrate through
well protected enterprise networks. The discovery and detection of attacks,
though needing continuous efforts, is no longer sufficient. Security Operation
Center (SOC) analysts are overwhelmed by the significant volume of intrusion
alerts without being able to extract actionable intelligence. Recognizing this
challenge, this paper describes the advances and findings through deploying
ASSERT to process intrusion alerts from OmniSOC in collaboration with the
Center for Applied Cybersecurity Research (CACR) at Indiana University. ASSERT
utilizes information theoretic unsupervised learning to extract and update
`attack models' in near real-time without expert knowledge. It consumes
streaming intrusion alerts and generates a small number of statistical models
for SOC analysts to comprehend ongoing and emerging attacks in a timely manner.
This paper presents the architecture and key processes of ASSERT and discusses
a few real-world attack models to highlight the use-cases that benefit SOC
operations. The research team is developing a light-weight containerized ASSERT
that will be shared through a public repository to help the community combat
the overwhelming intrusion alerts.

4
The categories of this paper are: cond-mat
36
The categories of this paper are: cmp-lg
2
The categories of this paper are: math
22
The categories of this paper are: chao-dyn
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
19
The categories of this paper are: eess
26
The categories of this paper are: bayes-an
30
The categories of this paper are: q-alg
24
The categories of this paper are: dg-ga
8
The categories of this paper are: hep-ex
13
The categories of this paper are: quant-ph
17
The categories of this paper are: q-fin
15
The categories of this paper are: nucl-ex
16
The categories of this paper are: stat
12
The categories of this paper are: nucl-th