.png){kind=icon}
返回
Creating Cybersecurity Knowledge Graphs From Malware After Action Reports
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2020.3039234.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
After Action Reports (AARs) provide incisive analysis of cyber-incidents. Extracting cyber-knowledge from these sources would provide security analysts with credible information, which they can use to detect or find patterns indicative of a cyber-attack. In this paper, we describe a system to extract information from AARs, aggregate the extracted information by fusing similar entities together, and represent that extracted information in a Cybersecurity Knowledge Graph (CKG). We extract entities by building a customized named entity recognizer called 'Malware Entity Extractor' (MEE). We then build a neural network to predict how pairs of 'malware entities' are related to each other. When we have predicted entity pairs and the relationship between them, we assert the 'entity-relationship set' in a CKG. Our next step in the process is to fuse similar entities, to improve our CKG. This fusion helps represent intelligence extracted from multiple documents and reports. The fused CKG has knowledge from multiple AARs, with relationships between entities extracted from separate reports. As a result of this fusion, a security analyst can execute queries and retrieve better answers on the fused CKG, than a knowledge graph with no fusion. We also showcase various reasoning capabilities that can be leveraged by a security analyst using our fused CKG.
Keyword:
Computer security
Security
Malware
Data mining
Blogs
Pipelines
Companies
Artificial intelligence
computer security
cyber threat intelligence
after action reports
knowledge graphs
semantic web
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Assessment of the pest status of Pratylenchus curvicauda and ultrastructural changes in roots of infected wheat and barley评估Pratylenchus curvicauda的害虫地位及感染小麦和大麦根部的超微结构变化
PREAI
分享收藏分享收藏分享收藏The complete genomic sequence of a novel botybirnavirus isolated from a phytopathogenic Bipolaris maydis从一种植物病原性 Bipolaris maydis 中分离得到的一种新型 botybirnavirus 的完整基因组序列.png)
Virus Genes
Virus GenesIF0
PREAI
分享收藏
查看更多内容