Yair Helman

Enterprise security assessment sharing

Adaptive data collection for root-cause analysis and intrusion detection

Detecting compromised computers by correlating reputation data with web access logs

Mapping between users and machines in an enterprise security assessment sharing system

Distributive Security Investigation

Estimating and visualizing security risk in information technology systems

Controlling malicious activity detection using behavioral models

Incremental filtering in a persistent query system

Detecting adversaries by correlating detected malware with web access logs

Automated collection of forensic evidence associated with a network security incident