Research on knowledge graph construction technology for cyber threat intelligence based on large language models

As the complexity and sophistication of cyber threats continue to increase, integrating cyber threat intelligence into cybersecurity measures has become crucial. A framework called AutoCTI2KG was proposed, which was based on large language models for constructing cyber threat intelligence knowledge...

Full description

Saved in:
Bibliographic Details
Main Authors: LAI Qingnan, JIN Jiandong, ZHOU Changling
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2024-11-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024225/
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:As the complexity and sophistication of cyber threats continue to increase, integrating cyber threat intelligence into cybersecurity measures has become crucial. A framework called AutoCTI2KG was proposed, which was based on large language models for constructing cyber threat intelligence knowledge graphs. Through instruction prompts and context learning, AutoCTI2KG automatically generated cybersecurity and attack knowledge graphs from cyber threat intelligence and provided actionable defense recommendations. Experimental results show that the proposed framework performs excellently in constructing cybersecurity and attack knowledge graphs, with F1 scores around 0.90, demonstrating the potential of large language models in knowledge graph construction in the cybersecurity domain. This work not only advances the frontier of cybersecurity knowledge graph construction but also provides a practical tool for cybersecurity professionals to better understand and mitigate cyber risks.
ISSN:1000-436X