Cybersecurity is a significant concern for businesses worldwide, as cybercriminals target business data and system resources. Cyber threat intelligence (CTI) enhances organizational cybersecurity resilience by obtaining, processing, evaluating, and disseminating information about potential risks and opportunities inside the cyber domain. This research investigates how companies can employ CTI to improve their precautionary measures against security breaches. The study follows a systematic review methodology, including selecting primary studies based on specific criteria and quality valuation of the selected papers. As a result, a comprehensive framework is proposed for implementing CTI in organizations. The proposed framework is comprised of a knowledge base, detection models, and visualization dashboards. The detection model layer consists of behavior-based, signature-based, and anomaly-based detection. In contrast, the knowledge base layer contains information resources on possible threats, vulnerabilities, and dangers to key assets. The visualization dashboard layer provides an overview of key metrics related to cyber threats, such as an organizational risk meter, the number of attacks detected, types of attacks, and their severity level. This relevant systematic study also provides insight for future studies, such as how organizations can tailor their approach to their needs and resources to facilitate more effective collaboration between stakeholders while navigating legal/regulatory constraints related to information sharing. 

A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience

Since its first steps in the cybersecurity field, Cyber Threat Intelligence (CTI) has gained recognition and increased its importance in the daily operations of cybersecurity teams. However, the many forms of CTI exchanged, the vast amount of CTI products, and the plurality of the sources have raised doubts about the CTI quality. This paper discusses the problem of CTI quality, focusing on the quality factors that better evaluate the products of CTI and how we measure them. Consequently, we propose a methodology for developing and assessing CTI quality metrics and demonstrate the application of this methodology by developing the relevance (<inline-formula> <tex-math notation="LaTeX">$RE$ </tex-math></inline-formula>) and weighted completeness (<inline-formula> <tex-math notation="LaTeX">$WC$ </tex-math></inline-formula>) metrics for unstructured and structured CTI products, respectively. We created two sets of structured and unstructured CTI data for this demonstration, utilizing them as benchmark datasets for estimating <inline-formula> <tex-math notation="LaTeX">$RE$ </tex-math></inline-formula> and <inline-formula> <tex-math notation="LaTeX">$WC$ </tex-math></inline-formula>.The proposed methodology introduces a systematic approach for developing and assessing quantitative CTI quality metrics for evaluating CTI data and CTI sources.

A Methodology for Developing & Assessing CTI Quality Metrics

Towards Cross-Physical-Domain Threat Inference for Industrial Control System Defense Adaptation

As an important part of the power system, the Internet of Things of power distribution is essential for the stable and reliable operation of the entire power system. In order to deal with new cyber attacks and threats, this paper proposes a threat tracing technology for power distribution Internet of Things security events. Firstly, the types of security incidents that may occur in the “cloud, pipe, edge, and end” links of the power distribution Internet of Things are sorted out. Secondly, on the basis of multi-source databases, the knowledge graph of security events is constructed to realize the correlation of security events. Thirdly, the knowledge graph is used to model the scene, and the attack scenario is reconstructed through the association between the event and the scene, so as to accurately reconstruct the generation path of the security event. Finally, experiments show that the technology can quickly locate the source of security events and realize the threat tracing of power distribution Internet of Things security events.

Threat Tracing of Power Distribution Automation System Based on Spatiotemporal and Business Logic Correlation Technology of Security Events

Automatic assessment and expansion of English vocabulary play a crucial role in language learning and proficiency evaluation. In this paper, we propose the use of an Optimized Bi-directional Long Short-Term Memory Deep Learning (Obi-LSTM-DL) model for these purposes. We conduct experiments using a comprehensive vocabulary dataset and evaluate the model's performance across various scenarios. The results demonstrate the effectiveness of the Obi-LSTM-DL model in accurately assessing vocabulary proficiency levels and expanding vocabulary knowledge. Through optimization experiments, we show that increasing the vocabulary size leads to improved model performance. Additionally, the model's proficiency level assessment capability allows for tailored instruction and support for language learners. Comparative analysis with baseline models further confirms the superiority of the Obi-LSTM-DL model. The results demonstrate the effectiveness of the Obi-LSTM-DL model in accurately assessing vocabulary proficiency levels and expanding vocabulary knowledge. Through optimization experiments, we show that increasing the vocabulary size leads to improved model performance, with an average increase in accuracy of 1.5% for every 1,000 words added to the vocabulary. Additionally, the model's proficiency level assessment capability allows for tailored instruction and support for language learners. Comparative analysis with baseline models further confirms the superiority of the Obi-LSTM-DL model, with an average increase in accuracy of 3.2% over traditional models.   

pdf/algorithm-design-and-implementation-of-automatic-assessment-1wfciqlkdp.pdf

Algorithm Design and Implementation of Automatic Assessment and Expansion of English Vocabulary

With the occurrence of cyber security incidents, the value of threat intelligence is coming to the fore. Timely extracting Indicator of Compromise (IOC) from cyber threat intelligence can quickly respond to threats. However, the sparse text in public threat intelligence scatters useful information, which makes it challenging to assess unstructured threat intelligence. In this paper, we proposed Cyber Threat Intelligence Automated Assessment Model (TIAM), a method to automatically assess highly sparse threat intelligence from multiple dimensions. TIAM implemented automatic classification of threat intelligence based on feature extraction, defined assessment criteria to quantify the value of threat intelligence, and combined ATT&CK to identify attack techniques related to IOC. Finally, we associated the identified IOCs, ATT&CK techniques, and intelligence quantification results. The experimental results shown that TIAM could better assess threat intelligence and help security managers to obtain valuable cyber threat intelligence.

An Automatic Assessment Method of Cyber Threat Intelligence Combined with ATT&CK Matrix

With the evolution of the industry from automation to intelligence, the control, and management of industry have gradually become intelligent and simple, and the Industrial Internet of Things has emerged. The most important industrial control system in the industrial Internet of Things has improved the control efficiency of managers to deal with emergencies, but it also makes hackers available. To improve the response-ability of the industrial control system to attack, a threat modeling and reasoning base on industrial control system assets is proposed. The model constructs the asset structure of the industrial control system through the description of assets and the Purdue model in A TT &CK, and then establishes a threat model through attackers and the consequences of attackers. Thus, it can effectively deal with the attack of the attacker. On this basis, the asset security ontology of the industrial control system(ASOICS) is constructed and based on ASOICS, the asset security inference rules under ICS are designed. The semantic relationship between asset security of industrial control system is established by using the expression ability of ontology which can improve the response speed of security personnel to ICS attacks. Finally, this method is applied to the real industrial control system attack case scenario for analysis, and the attack and assets are mapped to the knowledge map. The potential risks and actual attack scenarios of the attacked assets are successfully detected, which proves the effectiveness of the proposed method.

Threat Modeling and Reasoning for Industrial Control System Assets

Internet of Things (IoT)has numerous applications in the industry and society, thanks to its ability to achieve automation and connectivity in a range of activities. Despite its great potentials, IoT is susceptible to physical and cyber-attacks, which causes security threats (e.g., financial risk and leakage of privacy). To address this problem, an approach for attack prediction is proposed for IoT. Aiming at a high degree of flexibility, an intelligent model is designed to construct knowledge graph by integrating equipment information CPE, vulnerability information CVE and attack pattern information CAPEC disclosed by the National Institute of Standards and Technology (NIST) and the security organization MITRE. Based on the knowledge graph, the safety analysis and operation analysis of many IOT information are carried out. To conclude the possible attack, knowledge representation learning method that fuses the triple information and semantic path combination information of the knowledge graph (FTSPC) was employed. We transform the attack prediction task into the link prediction problem. The suggested method is evaluated on a public dataset and our dataset, the results demonstrated that the method can predict the attack of IoT infrastructure, providing rich IoT security knowledge to security researchers and professionals and a useful reference for active defense.

Attack prediction in Internet of Things using knowledge graph

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Peng Chen

Author Tools

Chat about Author

Papers

An Automatic Assessment Method of Cyber Threat Intelligence Combined with ATT&CK Matrix

Threat Modeling and Reasoning for Industrial Control System Assets

Attack prediction in Internet of Things using knowledge graph