Abstract:Terrorist attacks all across the world have become a major source of concern for almost all national governments. The United States Department of State's Bureau of Counter-Terrorism, maintains a list of 66 terrorist organizations spanning the entire world. Actively monitoring a large number of organizations and their members, require considerable amounts of resources on the part of law enforcement agencies. Oftentimes, the law enforcement agencies do not have adequate resources to monitor these organizations and their members effectively. On multiple incidences of terrorist attacks in recent times across Europe, it has been observed that the perpetrators of the attack were in the suspect databases of the law enforcement authorities, but weren't under active surveillance at the time of the attack, due to resource limitations on the part of the authorities. As the suspect databases in various countries are very large, and it takes significant amount of technical and human resources to monitor a suspect in the database, monitoring all the suspects in the database may be an impossible task. In this paper, we propose a novel terror network monitoring approach that will significantly reduce the resource requirement of law enforcement authorities, but still provide the capability of uniquely identifying a suspect in case the suspect becomes active in planning a terrorist attack. The approach relies on the assumption that, when an individual becomes active in planning a terrorist attack, his/her friends/associates will have some inkling of the individuals plan. Accordingly, even if the individual is not under active surveillance by the authorities, but the individual's friends/associates are, then the individual planning the attack can be uniquely identified. We apply our techniques on various real-world terror network datasets and show the effectiveness of our approach.

Construction of Anti-Terrorism Intelligence Graph Based on DIKW Framework

ASA: Adversary Situation Awareness Via Heterogeneous Graph Convolutional Networks.

Investigative Data Mining For Counterterrorism

TINKER: A framework for Open source Cyberthreat Intelligence

Connecting the Dots to Disconnect Them - A Study into Network Evolution and Dynamics for Analyzing Terrorist Networks

A Novel Graph Analytic Approach to Monitor Terrorist Networks

Modeling Data, Information and Knowledge for Security Protection of Hybrid IoT and Edge Resources

Data Privacy Protection for Edge Computing of Smart City in a DIKW Architecture.

Attack Graph Analysis for Network Anti-Forensics.

APTKG: Constructing Threat Intelligence Knowledge Graph from Open-Source APT Reports Based on Deep Learning

Data-Driven Cybersecurity Knowledge Graph Construction for Industrial Control System Security

An integrated deep-learning and multi-level framework for understanding the behavior of terrorist groups

MultiKG: Multi-Source Threat Intelligence Aggregation for High-Quality Knowledge Graph Representation of Attack Techniques

Graph Structural Mining in Terrorist Networks

An Incremental Boolean Tensor Factorization for Knowledge Reasoning in Artificial Intelligence of Things

AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reports

Analyzing Relationships in Terrorism Big Data Using Hadoop and Statistics

K-CTIAA: Automatic Analysis of Cyber Threat Intelligence Based on a Knowledge Graph

CRUcialG: Reconstruct Integrated Attack Scenario Graphs by Cyber Threat Intelligence Reports

Cybersecurity Threat Hunting and Vulnerability Analysis Using a Neo4j Graph Database of Open Source Intelligence

A management knowledge graph approach for critical infrastructure protection: Ontology design, information extraction and relation prediction