<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Detection-Research on CuraSec</title><link>https://curasec.metacog.co.kr/tags/detection-research/</link><description>Recent content in Detection-Research on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 17 Aug 2026 13:03:16 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/detection-research/index.xml" rel="self" type="application/rss+xml"/><item><title>Spectre HPC Detection Signatures Highly Fragile Across CPU Architectures</title><link>https://curasec.metacog.co.kr/insights/2026-08-17-characterizing-the-variance-envelope-a-multi-dimensional-ana/</link><pubDate>Mon, 17 Aug 2026 13:03:16 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-08-17-characterizing-the-variance-envelope-a-multi-dimensional-ana/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> Academic research showing that HPC-based Spectre detection signatures warp significantly with background noise, attack variants, and adversarial pacing across Intel/ARM/AMD — relevant if evaluating runtime hardware anomaly detection tools, but no change to running systems required today.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> The finding that static ML models trained on HPC telemetry fail in real-world noise conditions is useful context for evaluating any HPC-based Spectre detection coverage in your stack, but the paper provides no IOCs, rules, or hunt queries to act on now.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item><item><title>Benchmark inconsistencies skew lateral movement detection research</title><link>https://curasec.metacog.co.kr/insights/2026-08-03-on-fair-and-realistic-performance-evaluations-for-graph-base/</link><pubDate>Mon, 03 Aug 2026 15:12:30 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-08-03-on-fair-and-realistic-performance-evaluations-for-graph-base/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> Research shows that widely-cited lateral movement detectors perform significantly differently under standardized evaluation conditions, suggesting published accuracy claims may be overstated; useful context when selecting or tuning graph-based detection tools.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>