New framework detects cross-OS APTs using language models and optimal transport

By PulseAugur Editorial · [1 sources] · 2026-06-10 04:00

Researchers have developed a novel framework for detecting advanced persistent threats (APTs) across different operating systems without requiring any labeled data from the target system. The approach uses natural language processing to describe process behavior, embeds these descriptions using pre-trained language models, and then applies optimal transport methods to quantify deviations from normal behavior learned from a source operating system. Evaluations on multiple APT scenarios and operating systems demonstrated improved detection accuracy compared to existing source-only methods. AI

IMPACT This research offers a new method for cybersecurity that could improve threat detection capabilities across diverse systems.

RANK_REASON The cluster contains an academic paper detailing a new method for anomaly detection. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.AI →

paper
safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

COVERAGE [1]

arXiv cs.AI TIER_1 English(EN) · Sidahmed Benabderrahmanea, Petko Valtchev, James Cheney, Talal Rahwan · 2026-06-10 04:00

A Source Domain is All You Need: Source-Only Cross-OS Transfer Learning for APT Anomaly Detection via Semantic Alignment and Optimal Transport

arXiv:2606.10216v1 Announce Type: cross Abstract: Advanced Persistent Threats (APTs) are stealthy, multi-stage cyberattacks whose detection is difficult due to scarce labeled traces, severe class imbalance, and the challenge of generating realistic malicious behavior. These chall…

COVERAGE [1]

A Source Domain is All You Need: Source-Only Cross-OS Transfer Learning for APT Anomaly Detection via Semantic Alignment and Optimal Transport

RELATED ENTITIES

RELATED TOPICS