Rule Reduction after Knowledge Graph Mining for Cyber Situational Awareness Analysis

Coevolutionary modeling of cyber attack patterns and mitigations using public datasets

“…CALDERA Pathfinder [8] shows what vulnerability is exposed to an adversary based on threats linked via attack patterns from CAPEC. In addition, the data is also used in examples of modeling including situational awareness [11], predicting missing edges between CVE, CWE and CAPEC [29], and investigating data breaches with semantic analysis of ATT&CK [18].…”

Knowledge graph and behavior portrait of intelligent attack against path planning

“…The portrait can be utilized for investigation in reasoning the opponent's attack purpose, evaluating the system security environment, and supporting by making defensive decisions. 22 Focusing on advanced persistent threat (APT) attacks in the network, Jia et al 23 constructed a network security knowledge graph, and set trigger conditions, fault tolerance thresholds, and analysis time intervals based on the relationship between time and space constraints and attack steps. This method can correlate security events corresponding to the attack steps of the same compound attack from a large number of security events, and make judgments and predictions about APT attacks.…”

“…The portrait technology can automatically analyze and generate the characteristics and relations of some intelligent attack behaviors from collected operation data. The portrait can be utilized for investigation in reasoning the opponent's attack purpose, evaluating the system security environment, and supporting by making defensive decisions 22 . Focusing on advanced persistent threat (APT) attacks in the network, Jia et al 23 constructed a network security knowledge graph, and set trigger conditions, fault tolerance thresholds, and analysis time intervals based on the relationship between time and space constraints and attack steps.…”