Combating Fake Cyber Threat Intelligence using Provenance in Cybersecurity Knowledge Graphs
Loading...
Files
Links to Files
Author/Creator
Author/Creator ORCID
Date
2022-01-13
Type of Work
Department
Program
Citation of Original Publication
A. Piplai, S. Mittal, A. Joshi, T. Finin, J. Holt and R. Zak, "Creating Cybersecurity Knowledge Graphs From Malware After Action Reports," in IEEE Access, vol. 8, pp. 211691-211703, 2020, doi: 10.1109/ACCESS.2020.3039234.
Rights
© 2022 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Subjects
Abstract
Today there is a significant amount of fake cybersecurity related intelligence on the internet. To filter out such information, we build a system to capture the provenance information and represent it along with the captured Cyber Threat Intelligence (CTI). In the cybersecurity domain, such CTI is stored in Cybersecurity Knowledge Graphs (CKG). We enhance the exiting CKG model to incorporate intelligence provenance and fuse provenance graphs with CKG. This process includes modifying traditional approaches to entity and relation extraction. CTI data is considered vital in securing our cyberspace. Knowledge graphs containing CTI information along with its provenance can provide expertise to dependent Artificial Intelligence (AI) systems and human analysts.