Abstract:Owing to continuous cyberattacks, a large amount of threat intelligence is generated online every day. However, threat intelligence is mostly unstructured and multisource heterogeneous text. It is difficult for security analysts to understand the implicit threat in time. Knowledge Graph (KG) is an important research topic in recent years, which can perform automated and real-time analysis of threat intelligence in cybersecurity. As one of the critical technologies of KG, named entity recognition (NER) can identify cyberattack-related entities. It has been proved that long-distance structured information captured by dependency trees provides a rich semantic expression for the neural network. However, existing research works are more focused on the simple linear stack of neural networks when utilizing structured features. The interaction between different types of neural networks is vague. In addition, the existing models are insensitive to the boundaries of complex entity terms in cybersecurity. In this study, we propose a new f eature i ntegration and e ntity b oundary d etection (FIEBD) model. In our model, a new pretrained language model, PERT, is applied to obtain word embedding of cyber texts. Moreover, a novel neural network cell, namely GARU, is developed to incorporate different types of features extracted from graph neural networks and recurrent neural networks. It combines the graph encoder with the gate mechanism, aiming to obtain better hidden representation by explicit interaction. Furthermore, considering a large number of complex entities in cybersecurity, we contribute an entity boundary detection module to perform entity head and tail prediction as an augmentation task. We conduct extensive experiments on cybersecurity datasets. The results demonstrate that the proposed model achieves better performance than existing baseline methods.

A Framework to Construct Knowledge Base for Cyber Security

A General Construction Method of Cyber Security Knowledge Graph

A Framework for Threat Intelligence Extraction and Fusion

A Practical Approach to Constructing a Knowledge Graph for Cybersecurity

Towards a relation extraction framework for cyber-security concepts

KnowCTI: Knowledge-based Cyber threat intelligence entity and relation extraction

Text Command Intelligent Understanding for Cybersecurity Testing

A Software Security Entity Relationships Prediction Framework Based on Knowledge Graph Embedding Using Sentence-Bert.

A Novel Feature Integration and Entity Boundary Detection for Named Entity Recognition in Cybersecurity

Recent Progress of Using Knowledge Graph for Cybersecurity

Research on Automated Cyber Asset Scanning Tools Based on Cybersecurity Knowledge Graph

Recognizing and Extracting Cybersecurtity-relevant Entities from Text

Powering Filtration Process of Cyber Security Ecosystem Using Knowledge Graph

Cybersecurity Automated Information Extraction Techniques: Drawbacks of Current Methods, and Enhanced Extractors

Attack Analysis Framework for Cyber-Attack and Defense Test Platform

A Survey on Cybersecurity Knowledge Graph Construction

Cyber-Security Knowledge Graph Generation by Hierarchical Nonnegative Matrix Factorization

A review of knowledge graph application scenarios in cyber security

A Cybersecurity Knowledge Graph Completion Method for Penetration Testing

Automatic Labeling for Entity Extraction in Cyber Security

Data and knowledge-driven named entity recognition for cyber security