Skip to main content

On the assessment of completeness and timeliness of actionable cyber threat intelligence artefacts.

Yucel, C., Chalkias, I., Mallis, D., Karagiannis, E., Cetinkaya, D. and Katos, V., 2020. On the assessment of completeness and timeliness of actionable cyber threat intelligence artefacts. In: Multimedia Communications, Services & Security (MCSS'20), 8-9 October 2020, Krakow, Poland.

Full text available as:

[img]
Preview
PDF
MCSS2020_027_v1.pdf - Accepted Version
Available under License Creative Commons Attribution Non-commercial.

479kB

Abstract

In this paper we propose an approach for hunting adversarial tactics technics and procedures (TTPs) by leveraging information described in structured cyber threat intelligence (CTI) models. We focused on the properties of timeliness and completeness of CTI indicators to drive the discovery of TTPs placed highly on the so-called Pyramid of Pain (PoP). We used the unit42 playbooks dataset to evaluate the proposed approach and illustrate the limitations and opportunities of a systematic intelligence sharing process for high pain TTP discovery.

Item Type:Conference or Workshop Item (Paper)
Group:Faculty of Science & Technology
ID Code:34259
Deposited By: Unnamed user with email symplectic@symplectic
Deposited On:08 Jul 2020 12:08
Last Modified:12 Oct 2020 08:32

Downloads

Downloads per month over past year

More statistics for this item...
Repository Staff Only -