{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T18:08:38Z","timestamp":1777486118737,"version":"3.51.4"},"reference-count":30,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1109\/cns66487.2025.11194953","type":"proceedings-article","created":{"date-parts":[[2025,10,15]],"date-time":"2025-10-15T17:34:49Z","timestamp":1760549689000},"page":"1-10","source":"Crossref","is-referenced-by-count":1,"title":["Anticipating the Evolution of APT Variants Using Generative AI and Reinforcement Learning"],"prefix":"10.1109","author":[{"given":"Osama","family":"Iskandarani","sequence":"first","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Boubakr","family":"Nour","sequence":"additional","affiliation":[{"name":"Ericsson Security Research,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[{"name":"Ericsson Security Research,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2022.108919"},{"key":"ref2","article-title":"Nation-state attackers increasingly abuse Microsoft Graph API in espionage campaigns","author":"Zurier","year":"2024","journal-title":"SC Media"},{"key":"ref3","article-title":"AWS SNS Exploited for Data Exfiltration and Phishing Attacks","volume-title":"Kaaviya","year":"2025"},{"key":"ref4","volume-title":"MITRE ATT&CK for Industrial Control Systems","author":"Corporation"},{"key":"ref5","volume-title":"Operation Red Signature Targets South Korean Companies","author":"Research","year":"2018"},{"key":"ref6","volume-title":"APT41: A Dual Espionage and Cyber Crime Operation","author":"Fraser","year":"2019"},{"key":"ref7","volume-title":"This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits","author":"Glyer","year":"2020"},{"key":"ref8","author":"Research","year":"2020","journal-title":"How AI Caught APT41 Exploiting Vulnerabilities"},{"key":"ref9","volume-title":"APT41 Taps Google Red-Teaming Tool in Targeted Info-Stealing Attacks","author":"Raywood","year":"2023"},{"key":"ref10","volume-title":"APT41 Has Arisen From the DUST","author":"Stokkel","year":"2024"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2024.3378972"},{"key":"ref12","article-title":"An Interview Study on Third-Party Cyber Threat Hunting Processes in the US. Department of Homeland Security","author":"Maxam","year":"2024","journal-title":"USENIX Security"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2025.3581463"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3299519"},{"key":"ref15","volume-title":"MITRE Campaign - C0017","year":"2024"},{"key":"ref16","volume-title":"MITRE Campaign - C0040","year":"2012"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/LNET.2025.3551989"},{"key":"ref18","volume-title":"MITRE ATT&CK Framework","author":"Corporation","year":"2025"},{"key":"ref19","volume-title":"Common Attack Pattern Enumeration and Classification (CAPEC)","author":"Corporation","year":"2025"},{"key":"ref20","author":"Mogren","year":"2016","journal-title":"C-RNN-GAN: Continuous Recurrent Neural Networks with Adversarial Training"},{"key":"ref21","author":"Scialom","year":"2021","journal-title":"To Beam Or Not To Beam: That is a Question of Cooperation for Language GANs"},{"key":"ref22","volume-title":"MITRE ATT&CK Campaigns","author":"Corporation"},{"key":"ref23","article-title":"ATLAS: A Sequence-based Learning Approach for Attack Investigation","author":"Alsaheel","year":"2021","journal-title":"USENIX Security"},{"key":"ref24","article-title":"Accurify: Automated New Testflows Generation for Attack Variants in Threat Hunting","author":"Nour","year":"2023","journal-title":"FPS"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678909"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MRL.2024.3408710"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517393"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.10804"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737631"},{"key":"ref30","author":"Goodfellow","year":"2014","journal-title":"Generative Adversarial Networks"}],"event":{"name":"2025 IEEE Conference on Communications and Network Security (CNS)","location":"Avignon, France","start":{"date-parts":[[2025,9,8]]},"end":{"date-parts":[[2025,9,11]]}},"container-title":["2025 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11194903\/11194169\/11194953.pdf?arnumber=11194953","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T04:49:16Z","timestamp":1760590156000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11194953\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":30,"URL":"https:\/\/doi.org\/10.1109\/cns66487.2025.11194953","relation":{},"subject":[],"published":{"date-parts":[[2025,9,8]]}}}