Abstract:Cyber Supply Chain (CSC) system is complex which involves different sub-systems performing various tasks. Security in supply chain is challenging due to the inherent vulnerabilities and threats from any part of the system which can be exploited at any point within the supply chain. This can cause a severe disruption on the overall business continuity. Therefore, it is paramount important to understand and predicate the threats so that organization can undertake necessary control measures for the supply chain security. Cyber Threat Intelligence (CTI) provides an intelligence analysis to discover unknown to known threats using various properties including threat actor skill and motivation, Tactics, Techniques, and Procedure (TT and P), and Indicator of Compromise (IoC). This paper aims to analyse and predicate threats to improve cyber supply chain security. We have applied Cyber Threat Intelligence (CTI) with Machine Learning (ML) techniques to analyse and predict the threats based on the CTI properties. That allows to identify the inherent CSC vulnerabilities so that appropriate control actions can be undertaken for the overall cybersecurity improvement. To demonstrate the applicability of our approach, CTI data is gathered and a number of ML algorithms, i.e., Logistic Regression (LG), Support Vector Machine (SVM), Random Forest (RF), and Decision Tree (DT), are used to develop predictive analytics using the Microsoft Malware Prediction dataset. The experiment considers attack and TTP as input parameters and vulnerabilities and Indicators of compromise (IoC) as output parameters. The results relating to the prediction reveal that Spyware/Ransomware and spear phishing are the most predictable threats in CSC. We have also recommended relevant controls to tackle these threats. We advocate using CTI data for the ML predicate model for the overall CSC cyber security improvement.

CTI4AI: Threat Intelligence Generation and Sharing after Red Teaming AI Models

A Blackboard Sharing Mechanism for Community Cyber Threat Intelligence Based on Multi-Agent System.

Cyber-All-Intel: An AI for Security related Threat Intelligence

Cyberthreat-Intelligence Information Sharing: Enhancing Collaborative Security.

Towards an AI-Enhanced Cyber Threat Intelligence Processing Pipeline

Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI

A Red Teaming Framework for Securing AI in Maritime Autonomous Systems

ADMIn: Attacks on Dataset, Model and Input. A Threat Model for AI Based Software

Proactive security defense: cyber threat intelligence modeling for connected autonomous vehicles

Red-Teaming for Generative AI: Silver Bullet or Security Theater?

AI-Driven Cyber Threat Intelligence Automation

K-CTIAA: Automatic Analysis of Cyber Threat Intelligence Based on a Knowledge Graph

The Human Factor in AI Red Teaming: Perspectives from Social and Collaborative Computing

A Novel Threat Intelligence Information Extraction System Combining Multiple Models

Towards more Practical Threat Models in Artificial Intelligence Security

Cyber Threat Predictive Analytics for Improving Cyber Supply Chain Security

Preventing Poisoning Attacks on AI based Threat Intelligence Systems

Attackers reveal their arsenal: An investigation of adversarial techniques in CTI reports

Artificial Intelligence Security: Threats and Countermeasures

TIMiner: Automatically extracting and analyzing categorized cyber threat intelligence from social data