@inproceedings{saql, author = {Gao, Peng and Xiao, Xusheng and Li, Ding and Li, Zhichun and Jee, Kangkook and Wu, Zhenyu and Kim, Chung Hwan and Kulkarni, Sanjeev R. and Mittal, Prateek}, title = {{SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection}}, booktitle = {Proceedings of the 27th USENIX Security Symposium (Security 2018)}, month = Aug, year = {2018}, address = {Baltimore, MD}, //doi={10.5555/3277203.3277251}, url={https://dl.acm.org/doi/10.5555/3277203.3277251}, isbn={978-1-939133-04-5}, }