Decoding shadows: Towards Tactics, Techniques, and Procedures (TTP)-based Advanced Persistent Threat (APT) attribution.

Nanda Rani https://orcid.org/0000-0003-1255-5284 https://www.wikidata.org/entity/Q130990913

Nanda Rani Bikash Saha Vikas Maurya Sandeep Kumar Shukla Decoding shadows: Towards Tactics, Techniques, and Procedures (TTP)-based Advanced Persistent Threat (APT) attribution. 2026 May 381-408 35 Inf. Secur. J. A Glob. Perspect. 3 https://doi.org/10.1080/19393555.2025.2543450 db/journals/isjgp/isjgp35.html#RaniSMS26 streams/journals/isjgp

Bikash Saha Nanda Rani Sandeep Kumar Shukla On the Adversarial Planning Capabilities of LLMs. ARES (Workshops, 2) 2026 59-78 conf/IEEEares/2026-w2 https://doi.org/10.1007/978-3-032-35579-9_4 db/conf/IEEEares/ares2026-w2.html#SahaRS26 streams/conf/IEEEares Minghao Shao Nanda Rani Kimberly Milner Haoran Xi Meet Udeshi Saksham Aggarwal Venkata Sai Charan Putrevu Sandeep K. Shukla Prashanth Krishnamurthy Farshad Khorrami Ramesh Karri Muhammad Shafique 0001 Towards Effective Offensive Security LLM Agents: Hyperparameter Tuning, LLM as a Judge, and a Lightweight CTF Benchmark. 29660-29668 2026 AAAI https://doi.org/10.1609/aaai.v40i35.40210 conf/aaai/2026 db/conf/aaai/aaai2026.html#ShaoRMXUAPSKKKS26

Nanda Rani Kimberly Milner Minghao Shao Meet Udeshi Haoran Xi Venkata Sai Charan Putrevu Saksham Aggarwal Sandeep K. Shukla Prashanth Krishnamurthy Farshad Khorrami Muhammad Shafique 0001 Ramesh Karri CyberExplorer: Benchmarking LLM Offensive Security Capabilities in a Real-World Attacking Simulation Environment. 2026 February abs/2602.08023 CoRR https://doi.org/10.48550/arXiv.2602.08023 db/journals/corr/corr2602.html#abs-2602-08023 streams/journals/corr

Haoran Xi Minghao Shao Kimberly Milner Venkata Sai Charan Putrevu Nanda Rani Meet Udeshi Prashanth Krishnamurthy Brendan Dolan-Gavitt Siddharth Garg Sandeep Kumar Shukla Farshad Khorrami Alon Hillel-Tuch Muhammad Shafique 0001 Ramesh Karri AI In Cybersecurity Education - Scalable Agentic CTF Design Principles and Educational Outcomes. 2026 March abs/2603.21551 CoRR https://doi.org/10.48550/arXiv.2603.21551 db/journals/corr/corr2603.html#abs-2603-21551 streams/journals/corr

Nanda Rani Christian Rossow On the Security of Research Artifacts. 2026 May abs/2605.06508 CoRR https://doi.org/10.48550/arXiv.2605.06508 db/journals/corr/corr2605.html#abs-2605-06508 streams/journals/corr

Nanda Rani Bikash Saha Sandeep Kumar Shukla A comprehensive survey of automated Advanced Persistent Threat attribution: Taxonomy, methods, challenges and open research problems. 104076 2025 92 J. Inf. Secur. Appl. https://doi.org/10.1016/j.jisa.2025.104076 db/journals/istr/istr92.html#RaniSS25 streams/journals/istr

Bikash Saha Nanda Rani Joheen Chakraborty Divyanshu Singh Soumyo V. Chakraborty Sandeep Kumar Shukla PARAG: Proactive Answering Framework Integrating LLMs with Retrieval-Augmented Generation. 20-37 2025 EICC https://doi.org/10.1007/978-3-031-94855-8_2 conf/eicc/2025 db/conf/eicc/eicc2025.html#SahaRCSCS25 Antonino Vitale Simone Aonzo Savino Dambra Nanda Rani Lorenzo Ippolito Platon Kotzias Juan Caballero Davide Balzarotti The Polymorphism Maze: Understanding Diversities and Similarities in Malware Families. 505-525 2025 ESORICS (3) https://doi.org/10.1007/978-3-032-07894-0_26 conf/esorics/2025-3 db/conf/esorics/esorics2025-3.html#VitaleADRIKCB25 streams/conf/esorics Bikash Saha Nanda Rani Sandeep Kumar Shukla MaLAware: Automating the Comprehension of Malicious Software Behaviours using Large Language Models (LLMs). 169-173 2025 MSR https://doi.org/10.1109/MSR66628.2025.00037 conf/msr/2025 db/conf/msr/msr2025.html#SahaRS25

Meet Udeshi Minghao Shao Haoran Xi Nanda Rani Kimberly Milner Venkata Sai Charan Putrevu Brendan Dolan-Gavitt Sandeep Kumar Shukla Prashanth Krishnamurthy Farshad Khorrami Ramesh Karri Muhammad Shafique 0001 D-CIPHER: Dynamic Collaborative Intelligent Agents with Planning and Heterogeneous Execution for Enhanced Reasoning in Offensive Security. 2025 February abs/2502.10931 CoRR https://doi.org/10.48550/arXiv.2502.10931 db/journals/corr/corr2502.html#abs-2502-10931 streams/journals/corr

Bikash Saha Nanda Rani Sandeep Kumar Shukla MaLAware: Automating the Comprehension of Malicious Software Behaviours using Large Language Models (LLMs). 2025 April abs/2504.01145 CoRR https://doi.org/10.48550/arXiv.2504.01145 db/journals/corr/corr2504.html#abs-2504-01145 streams/journals/corr

Bikash Saha Nanda Rani Sandeep Kumar Shukla Generative AI in Financial Institution: A Global Survey of Opportunities, Threats, and Regulation. 2025 April abs/2504.21574 CoRR https://doi.org/10.48550/arXiv.2504.21574 db/journals/corr/corr2504.html#abs-2504-21574 streams/journals/corr

Minghao Shao Haoran Xi Nanda Rani Meet Udeshi Venkata Sai Charan Putrevu Kimberly Milner Brendan Dolan-Gavitt Sandeep Kumar Shukla Prashanth Krishnamurthy Farshad Khorrami Ramesh Karri Muhammad Shafique 0001 CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution. 2025 May abs/2505.17107 CoRR https://doi.org/10.48550/arXiv.2505.17107 db/journals/corr/corr2505.html#abs-2505-17107 streams/journals/corr

Nanda Rani Sandeep Kumar Shukla AURA: A Multi-Agent Intelligence Framework for Knowledge-Enhanced Cyber Threat Attribution. 2025 June abs/2506.10175 CoRR https://doi.org/10.48550/arXiv.2506.10175 db/journals/corr/corr2506.html#abs-2506-10175 streams/journals/corr

Minghao Shao Nanda Rani Kimberly Milner Haoran Xi Meet Udeshi Saksham Aggarwal Venkata Sai Charan Putrevu Sandeep Kumar Shukla Prashanth Krishnamurthy Farshad Khorrami Ramesh Karri Muhammad Shafique 0001 Towards Effective Offensive Security LLM Agents: Hyperparameter Tuning, LLM as a Judge, and a Lightweight CTF Benchmark. 2025 August abs/2508.05674 CoRR https://doi.org/10.48550/arXiv.2508.05674 db/journals/corr/corr2508.html#abs-2508-05674 streams/journals/corr

Venkata Sai Charan Putrevu Subhasis Mukhopadhyay Subhajit Manna Nanda Rani Ansh Vaid Hrushikesh Chunduri Mohan Anand Putrevu Sandeep K. Shukla ADAPT: Adaptive Camouflage Based Deception Orchestration For Trapping Advanced Persistent Threats. 21:1-21:35 2024 5 DTRAP 3 https://doi.org/10.1145/3651991 https://www.wikidata.org/entity/Q130990916 db/journals/dtrap/dtrap5.html#PutrevuMMRVCPS24

Nanda Rani Bikash Saha Vikas Maurya Sandeep Kumar Shukla TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports. 37:1-37:19 2024 December 5 Digit. Threat. Res. Pract. 4 https://doi.org/10.1145/3696427 db/journals/dtrap/dtrap5.html#RaniSMS24 streams/journals/dtrap

Bikash Saha Nanda Rani Sandeep Kumar Shukla MAD: A Meta-Learning Approach to Detect Advanced Persistent Threats using Provenance Data in Industrial IoT. 201-207 2024 ACSAC Workshops https://doi.org/10.1109/ACSACW65225.2024.00029 conf/acsac/2024w db/conf/acsac/acsac2024w.html#SahaRS24 Nanda Rani Bikash Saha Ravi Kumar Sandeep Kumar Shukla Genesis of Cyber Threats: Towards Malware-based Advanced Persistent Threat (APT) Attribution. 399-408 2024 TPS-ISA https://doi.org/10.1109/TPS-ISA62245.2024.00052 conf/tpsisa/2023 db/conf/tpsisa/tpsisa2024.html#RaniSKS24

Nanda Rani Bikash Saha Vikas Maurya Sandeep Kumar Shukla TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports. 2024 abs/2403.03267 CoRR https://doi.org/10.48550/arXiv.2403.03267 db/journals/corr/corr2403.html#abs-2403-03267

Nanda Rani Bikash Saha Sandeep Kumar Shukla A Comprehensive Survey of Advanced Persistent Threat Attribution: Taxonomy, Methods, Challenges and Open Research Problems. 2024 abs/2409.11415 CoRR https://doi.org/10.48550/arXiv.2409.11415 db/journals/corr/corr2409.html#abs-2409-11415 streams/journals/corr

Nanda Rani Bikash Saha Vikas Maurya Sandeep Kumar Shukla Chasing the Shadows: TTPs in Action to Attribute Advanced Persistent Threats. 2024 abs/2409.16400 CoRR https://doi.org/10.48550/arXiv.2409.16400 db/journals/corr/corr2409.html#abs-2409-16400 streams/journals/corr

Nanda Rani Divyanshu Singh Bikash Saha Sandeep Kumar Shukla Automated Classification of Cybercrime Complaints using Transformer-based Language Models for Hinglish Texts. 2024 abs/2412.16614 CoRR https://doi.org/10.48550/arXiv.2412.16614 db/journals/corr/corr2412.html#abs-2412-16614 streams/journals/corr

Nanda Rani Bikash Saha Vikas Maurya Sandeep Kumar Shukla TTPHunter: Automated Extraction of Actionable Intelligence as TTPs from Narrative Threat Reports. 126-134 2023 ACSW https://doi.org/10.1145/3579375.3579391 https://www.wikidata.org/entity/Q131127478 conf/acsw/2023 db/conf/acsw/acsw2023.html#RaniSMS23 Bikash Saha Nanda Rani Sandeep Kumar Shukla MalXCap: A Method for Malware Capability Extraction. 230-249 2023 ISPEC https://doi.org/10.1007/978-981-99-7032-2_14 conf/ispec/2023 db/conf/ispec/ispec2023.html#SahaRS23 Nanda Rani Ayushi Mishra Rahul Kumar Sarbajit Ghosh Sandeep K. Shukla Priyanka Bagade A Generalized Unknown Malware Classification. 793-806 2022 SecureComm https://doi.org/10.1007/978-3-031-25538-0_41 conf/securecomm/2022 db/conf/securecomm/securecomm2022.html#RaniMKGSB22 Vikas Maurya Nanda Rani Sandeep Kumar Shukla RemOD: Operational Drift-Adaptive Intrusion Detection. 314-333 2022 SPACE https://doi.org/10.1007/978-3-031-22829-2_17 conf/space/2022 db/conf/space/space2022.html#MauryaRS22

Nanda Rani Sunita Vikrant Dhavale Leveraging Machine Learning for Ransomware Detection. 2022 abs/2206.01919 CoRR https://doi.org/10.48550/arXiv.2206.01919 db/journals/corr/corr2206.html#abs-2206-01919

Nanda Rani Sunita Vikrant Dhavale Amarjit Singh Atul Mehra A Survey on Machine Learning-Based Ransomware Detection. 171-186 2021 ICMC https://doi.org/10.1007/978-981-16-6890-6_13 conf/icmc2/2021 db/conf/icmc2/icmc2021.html#RaniDSM21 Saksham Aggarwal Simone Aonzo Priyanka Bagade Davide Balzarotti Juan Caballero Joheen Chakraborty Soumyo V. Chakraborty Hrushikesh Chunduri Savino Dambra Sunita Vikrant Dhavale Brendan Dolan-Gavitt Siddharth Garg Sarbajit Ghosh Alon Hillel-Tuch Lorenzo Ippolito Ramesh Karri Farshad Khorrami Platon Kotzias Prashanth Krishnamurthy Rahul Kumar Ravi Kumar Subhajit Manna Vikas Maurya Atul Mehra Kimberly Milner Ayushi Mishra Subhasis Mukhopadhyay Mohan Anand Putrevu Venkata Sai Charan Putrevu Christian Rossow Bikash Saha Muhammad Shafique 0001 Minghao Shao Sandeep K. ShuklaSandeep Kumar Shukla Amarjit Singh Divyanshu Singh Meet Udeshi Ansh Vaid Antonino Vitale Haoran Xi