Pinruei Chen

A Unified Log-Processing Framework for Multi-Source SIEM-Based Intrusion Detection

Enterprise intrusions rarely being recorded in just one device. In practice, defenders must correlate DNS, web, authentication, process, and network-flow evidence, yet many learning-based pipelines still analyze each source independently or combine signals only after separate prediction. This paper presents a unified r...