@inproceedings{Abdollahi+:PRISM26,
    title       = "NOD: Uncovering Intense Attackers’ Behavior Through Nested Outlier Detection From SSH Logs",
    author      = "Ghazal Abdollahi and Hamid Asadi and Robert Ricci",
    booktitle   = "Proceedings of the Workshop on Attack Provenance, Reasoning, and Investigation for Security in the Monitored Environment (PRISM)",
    year        = 2026,
    month       = feb,
    url         = "https://www.flux.utah.edu/paper/abdollahi-pets26"
}