Results 11 to 20 of about 383 (171)

CVE2ATT&CK: BERT-Based Mapping of CVEs to MITRE ATT&CK Techniques

Algorithms, 2022
Since cyber-attacks are ever-increasing in number, intensity, and variety, a strong need for a global, standardized cyber-security knowledge database has emerged as a means to prevent and fight cybercrime. Attempts already exist in this regard.
Octavian Grigorescu, Andreea Nica, Mihai Dascalu, Razvan Rughinis   +3 more
doaj   +2 more sources

OntoLogX: Ontology‐Guided Knowledge Graph Extraction From Cybersecurity Logs With Large Language Models

Advanced Intelligent Systems
System logs represent a valuable source of cyber threat intelligence (CTI), capturing attacker behaviors, exploited vulnerabilities, and traces of malicious activity.
Luca Cotti, Idilio Drago, Anisa Rula, Devis Bianchini, Federico Cerutti   +4 more
doaj   +2 more sources

Automated Mapping of Common Vulnerabilities and Exposures to MITRE ATT&CK Tactics

Information
Effectively understanding and categorizing vulnerabilities is vital in the ever-evolving cybersecurity landscape, since only one exposure can have a devastating effect on the entire system. Given the increasingly massive number of threats and the size of
Ioana Branescu, Octavian Grigorescu, Mihai Dascalu   +2 more
doaj   +2 more sources

Linking CVE’s to MITRE ATT&CK Techniques [PDF]

Proceedings of the 16th International Conference on Availability, Reliability and Security, 2021
The MITRE Corporation is a non-profit organization that has made substantial efforts into creating and maintaining knowledge bases relevant to cybersecurity and has been widely adopted by the community. ATT&CK ”Adversarial Tactics, Techniques, and Common Knowledge” is a popular taxonomy by MITRE, which describes threat actor behaviors.
Aditya Kuppa, Lamine M. Aouad, Nhien-An Le-Khac   +2 more
openaire   +1 more source

Investigating co-occurrences of MITRE ATT\&CK Techniques

CoRR, 2022
Cyberattacks use adversarial techniques to bypass system defenses, persist, and eventually breach systems. The MITRE ATT\&CK framework catalogs a set of adversarial techniques and maps between adversaries and their used techniques and tactics. Understanding how adversaries deploy techniques in conjunction is pivotal for learning adversary behavior,
Md. Rayhanur Rahman, Laurie A. Williams
openaire   +2 more sources

SoK: The MITRE ATT&CK Framework in Research and Practice

CoRR, 2023
The MITRE ATT&CK framework, a comprehensive knowledge base of adversary tactics and techniques, has been widely adopted by the cybersecurity industry as well as by academic researchers. Its broad range of industry applications include threat intelligence, threat detection, and incident response, some of which go beyond what it was originally ...
Shanto Roy, Emmanouil Panaousis, Cameron Noakes, Aron Laszka, Sakshyam Panda, George Loukas   +5 more
openaire   +2 more sources

Learning the Associations of MITRE ATT & CK Adversarial Techniques [PDF]

2020 IEEE Conference on Communications and Network Security (CNS), 2020
The MITRE ATT&CK Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures (TTP). However, this information would be highly useful for attack diagnosis (i.e., forensics) and mitigation (i.e., intrusion response) if we can reliably construct technique associations that will enable predicting unobserved ...
Rawan Al-Shaer, Jonathan M. Spring, Eliana Christou   +2 more
openaire   +2 more sources

Introducing UWF-ZeekData22: A Comprehensive Network Traffic Dataset Based on the MITRE ATT&CK Framework

Data, 2023
With the rapid rate at which networking technologies are changing, there is a need to regularly update network activity datasets to accurately reflect the current state of network infrastructure/traffic.
Sikha S. Bagui, Dustin Mink, Subhash C. Bagui, Tirthankar Ghosh, Russel Plenkers, Tom McElroy, Stephan Dulaney, Sajida Shabanali   +7 more
doaj   +1 more source

An investigation of security controls and MITRE ATT\&CK techniques

CoRR, 2022
Attackers utilize a plethora of adversarial techniques in cyberattacks to compromise the confidentiality, integrity, and availability of the target organizations and systems. Information security standards such as NIST, ISO/IEC specify hundreds of security controls that organizations can enforce to protect and defend the information systems from ...
Md. Rayhanur Rahman, Laurie A. Williams
openaire   +2 more sources

Assessment of the Distributed Ledger Technology for Energy Sector Industrial and Operational Applications Using the MITRE ATT&CK® ICS Matrix

IEEE Access, 2023
In recent times, Distributed Ledger Technology (DLT) has gained significant attention for its potential application in the energy sector. Utilizing blockchain and DLT has demonstrated the ability to enhance the resilience of the electric infrastructure ...
Annabelle Lee, Sri Nikhil Gupta Gourisetti, David Jonathan Sebastian-Cardenas, Kent Lambert, Vicente Navarro, Marco Pasetti, Umit Cali, Kateryna Isirova, Ramesh Reddi, Puica Nitu, Md. Touhiduzzaman, Michael Mylrea, Philip Huff, Farrokh Rahimi, Shammya Shananda Saha   +14 more
doaj   +1 more source