Adam Bates Yuile

🚨CARBANAKv2 🚨EDR/XDR/Provenance dataset with dwell time, lateral movement, naturalistic background activity now available at bitbucket.org/sts-lab/carban… !! Try the @PrismNdss26 interactive tutorial colab notebook to explore the attack!

497 ICML 2026 submissions got desk rejected because their authors served as a reviewer but violated the policy of the use of LLMs. #ICML2026

Sure is a lot of hoopla for a pico on a palmetto bug

@adityagp Neat! While still in preprint, I suggest changing buzzy phrasing to something more culturally sensitive — experiential knowledge, institutional knowledge, etc.?

New preprint on arming data agents with what we call _tribal knowledge_ — the kind of knowledge one accumulates on the job as a data analyst or data engineer. Our approach is fully **bolt-on**, with impressive results atop existing approaches. To correct agentic misconceptions, we show that tribal knowledge needs to be (a) structured, and (b) be provided to agents in a piecemeal, context-dependent manner. This is an important component in our agent-first data systems agenda. Take a look! Led by Shubham Agarwal @_asimbiswal @SepantaZeighami w/ colleagues @profjoeyg @alvinkcheung arxiv.org/abs/2602.13521

“The PIDS Research Workflow is Painful” I feel so seen! 😭 Tristan Bilot presenting PIDSMaker at @PrismNdss26

Woohoo! The inaugural @PrismNdss26 is underway.

If you want to drop in on @PrismNdss26 today we’re off the beaten path — by the deli just past the Ruth’s Chris’s’s’s steakhouse! 😂

@MuhammadAdilIn1 @PrismNdss26 @akulgoyal00 TL;DR -- @PrismNdss26 is basically a gift-wrapped starter kit for conducting effective systems research on real-world security operations, an area that frankly needs more attention and talent. Join us!

@MuhammadAdilIn1 @PrismNdss26 @akulgoyal00 This work joins a ton of other amazing talks about sophisticated threat analysis and how to conduct applied and rigorous research in the area. Tutorials on on push-button PIDS evaluations, threat intelligence extraction, and development of new attack engagements. 🧵

At @NDSSSymposium for the Monday workshops? I *can’t tell you* how excited I am for the inaugural @PrismNdss26. I’ve asked my poor students to engage in a lot of (largely thankless) work developing community resources the past few years. We’re bringing it all to PRISM. 🧵

Congrats to our student author @MuhammadAdilIn1 and collaborators at Broadcom Carbon Black. Preprint available here: arxiv.org/pdf/2405.04691

We demonstrate comparable alert triage rates to costly provenance analysis -- 84% global reduction in false alerts -- by examining an alert-triggering process' *instantaneous* context. By foregoing provenance, we are able to process thousands of alerts per sec.

Excited to share that our lightning fast EDR alert triage system, Carbon Filter, has been (conditionally) accepted to appear at #RAID2025!

Don’t know where you’re sitting but Stefan complimented our research agenda. ; ) #JustSaying #ieeesp25 @IEEESSP

@tianyin_xu @siebelschool @uofigrainger No need to start a letter writing campaign @tianyin_xu ; ) There is an overabundance of good will on both sides of the table. I am sure that if Nancy can make it happen she will!

This would be a huuuge loss of @siebelschool @uofigrainger ! I'd cry if Adam leaves, but I also will really appreciate anyone who has openings for Adam and Amanda. This is a great great opportunity for any department to build up or significantly boost Systems Security Research!

IEEE S&P 2027 will take place in Montreal, Canada 🤯