Advanced Persistent Threat Detection via Adaptive Dynamic Masking and Heterogeneity-Aware Projection
This paper proposes AMH-APT, a novel APT detection framework that enhances provenance graph analysis by employing an adaptive dynamic masking strategy to preserve critical attack context and heterogeneity-aware projection to maintain distinct semantic spaces for diverse entity types, thereby outperforming existing methods in both log-level and entity-level detection tasks.