.png){kind=icon}
返回
Attack Hypotheses Generation Based on Threat Intelligence Knowledge Graph
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2022.3233703.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Cyber threat intelligence on past attacks may help with attack reconstruction and the prediction of the course of an ongoing attack by providing deeper understanding of the tools and attack patterns used by attackers. Therefore, cyber security analysts employ threat intelligence, alert correlations, machine learning, and advanced visualizations in order to produce sound attack hypotheses. In this article, we present AttackDB, a multi-level threat knowledge base that combines data from multiple threat intelligence sources to associate high-level ATT&CK techniques with low-level telemetry found in behavioral malware reports. We also present the Attack Hypothesis Generator which relies on knowledge graph traversal algorithms and a variety of link prediction methods to automatically infer ATT&CK techniques from a set of observable artifacts. Results of experiments performed with 53K VirusTotal reports indicate that the proposed algorithms employed by the Attack Hypothesis Generator are able to produce accurate adversarial technique hypotheses with a mean average precision greater than 0.5 and area under the receiver operating characteristic curve of over 0.8 when it is implemented on the basis of AttackDB. The presented toolkit will help analysts to improve the accuracy of attack hypotheses and to automate the attack hypothesis generation process.
Keyword:
Attack hypotheses
cyber threat intelligence
data fusion
link prediction
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
.png){kind=icon}
A Model for the Growth of AlN Films on Silicon Substrates by Plasma-Assisted Molecular Beam Epitaxy
PREAI
分享收藏分享收藏Know Abnormal, Find Evil: Frequent Pattern Mining for Ransomware Threat Hunting and Intelligence
OAAI
OAAI分享收藏Compelexes de la ferrotetraphenylporphyrine avec des chlorocarbenes porteurs d'un groupement electroattracteur: Fer(II)(TPP)(CClA), A = CN ou COOC2H5四苯基四苯基铁卟啉化合物电子吸引子: Fer(II)(TPP)(CClA)，A = CN ou COOC2H5
PREAI
分享收藏
查看更多内容