Skip to main content
Author(s):
Khandakar Ashrafi Akbar Sadaf Md Halim Yibo Hu Anoop Singhal Latifur Khan Bhavani Thuraisingham
Secondary Title
Springer International Publishing
Abstract

In this work, we are motivated to aid the security analyst by introducing a tool which will help to produce a swift and effective response to incoming threats. If an analyst identifies the nature of an incoming attack, our system can produce a ranked list of solutions for the analyst to quickly try out, saving both effort and time.

Concluding remarks
Currently, the security analyst is typically left to manually produce a solution by consulting existing frameworks and knowledge bases, such as the ATT &CK and D3FEND frameworks by the MITRE Corporation. To solve these challenges, our tool leverages state-of-the-art machine learning frameworks to provide a comprehensive solution for security analysts. Our tool uses advanced natural language processing techniques, including a large language model (RoBERTa), to derive meaningful semantic associations between descriptions of offensive techniques and defensive countermeasures. Experimental results confirm that our proposed method can provide useful suggestions to the security analyst with good accuracy, especially in comparison to baseline approaches which fail to exhibit the semantic and contextual understanding necessary to make such associations.

Reference details

DOI
10.1007/978-3-031-10684-2_7
Resource type
Miscellaneous
Year of Publication
2022
ISSN Number
0302-9743
Publication Area
Civilian cybersecurity
Date Published
2022

How to cite this reference:

Akbar, K. A., Halim, S. M., Hu, Y., Singhal, A., Khan, L., & Thuraisingham, B. (2022). Knowledge Mining in Cybersecurity: From Attack to Defense. https://doi.org/10.1007/978-3-031-10684-2_7 (Original work published 2022)