Cyber Threat Triage and Intelligence in Critical Infrastructure

Infrastructure supporting security assessment and threat intelligence for Critical Infrastructure and emerging technologies — IoMT, IoBT, smart grids, and autonomous vehicles.

2020–2025Natural Sciences and Engineering Research Council of Canada (NSERC)PI: Dr. Ali Dehghantanha

This project builds infrastructure that support security assessment and analysis of a wide range of Critical Infrastructure and emerging technologies, including Internet of Medical Things (IoMT), Internet of Battlefield Things (IoBT), smart grids and autonomous vehicles. Moreover, the resulting cybersecurity and threat intelligence technologies will lead to more secure and resilient systems and inform security analysts how to swiftly and accurately detect, avoid and respond to cyberattacks on CI. Finally, it will provide decisionmakers with new insights about Canada’s threat landscape and the ability to assess the suitability of different cybersecurity technologies, including intrusion detection systems and threat hunting systems, to protect Canada’s CI.

Related publications

Cyber Threat Triage and Intelligence in Critical Infrastructure

Windows-APT 2025: A dataset for APT-inspired attack scenarios on Windows systems

Maryam Mozaffari, Abbas Yazdinejad, Ali Dehghantanha

Data in Brief · 2026

Cyber Threat Triage and Intelligence in Critical Infrastructure

TrollSleuth: Behavioral and Linguistic Fingerprinting of State-Sponsored Trolls

Havva Alizadeh Noughabi, Fattane Zarrinkalam, Abbas Yazdinejad, Ali Dehghantanha

2025 22nd Annual International Conference on Privacy, Security, and Trust (PST) · 2025

Cyber Threat Triage and Intelligence in Critical Infrastructure

A Federated Learning Approach for Multi-stage Threat Analysis in Advanced Persistent Threat Campaigns

Florian Nelles, Abbas Yazdinejad, Ali Dehghantanha, Reza M. Parizi, Gautam Srivastava

arXiv (preprint) · 2024

Cyber Threat Triage and Intelligence in Critical Infrastructure

An ensemble deep federated learning cyber-threat hunting model for Industrial Internet of Things

Amir Namavar Jahromi, Hadis Karimipour, Ali Dehghantanha

Computer Communications · 2023

Cyber Threat Triage and Intelligence in Critical Infrastructure

Generative Adversarial Networks for Cyber Threat Hunting in Ethereum Blockchain

Elnaz Rabieinejad, Abbas Yazdinejad, Reza M. Parizi, Ali Dehghantanha

Distributed Ledger Technologies: Research and Practice · 2023

Cyber Threat Triage and Intelligence in Critical Infrastructure

Accurate threat hunting in industrial internet of things edge devices

Abbas Yazdinejad, Behrouz Zolfaghari, Ali Dehghantanha, Hadis Karimipour, Gautam Srivastava, Reza M. Parizi

Digital Communications and Networks · 2023

Cyber Threat Triage and Intelligence in Critical Infrastructure

P3GNN: A Privacy-Preserving Provenance Graph-Based Model for APT Detection in Software Defined Networking

Hedyeh Nazari, Abbas Yazdinejad, Ali Dehghantanha, Fattane Zarrinkalam, Gautam Srivastava

Proceedings of the Workshop on Autonomous Cybersecurity · 2023

Cyber Threat Triage and Intelligence in Critical Infrastructure

Generative adversarial network to detect unseen Internet of Things malware

Zahra Moti, Sattar Hashemi, Hadis Karimipour, Ali Dehghantanha, Amir Namavar Jahromi, Lida Abdi, Fatemeh Alavi

Ad Hoc Networks · 2021

Cyber Threat Triage and Intelligence in Critical Infrastructure

Cryptocurrency malware hunting: A deep Recurrent Neural Network approach

Abbas Yazdinejad, Hamed HaddadPajouh, Ali Dehghantanha, Reza M. Parizi, Gautam Srivastava, Mu-Yen Chen

Applied Soft Computing · 2020

Cyber Threat Triage and Intelligence in Critical Infrastructure

MVFCC: A Multi-View Fuzzy Consensus Clustering Model for Malware Threat Attribution

Hamed Haddadpajouh, Amin Azmoodeh, Ali Dehghantanha, Reza M. Parizi

IEEE Access · 2020

Cyber Threat Triage and Intelligence in Critical Infrastructure

Know Abnormal, Find Evil: Frequent Pattern Mining for Ransomware Threat Hunting and Intelligence

Sajad Homayoun, Ali Dehghantanha, Marzieh Ahmadzadeh, Sattar Hashemi, Raouf Khayami

IEEE Transactions on Emerging Topics in Computing · 2020

Cyber Threat Triage and Intelligence in Critical Infrastructure

Machine learning aided Android malware classification

Nikola Milosevic a, Ali Dehghantanha b, Kim-Kwang Raymond Choo

Computers & Electrical Engineering · 2017

Cyber Threat Triage and Intelligence in Critical Infrastructure

Intelligent OS X malware threat detection with code inspection

Hamed Haddad Pajouh, Ali Dehghantanha, Raouf Khayami, Kim-Kwang Raymond Choo

Journal of Computer Virology and Hacking Techniques · 2017