CVE-driven Attack Technique Prediction with Semantic Information Extraction and a Domain-specific Language Model

R. Johansson and P. Nugues, “Dependency-based semantic role labeling of propbank,” in Proceedings of the 2008 Conference on Empirical Methods in Natural Language Processing , 2008, pp. 69–78

2008

Earlier work this paper cites.

N. Kambhatla and I. Zitouni, “Systems and methods for automatic semantic role labeling of high morphological text for natural language processing applications,” Sep. 3 2013, uS Patent 8,527,262

2013

Earlier work this paper cites.

L. He, K. Lee, M. Lewis, and L. Zettlemoyer, “Deep semantic role labeling: What works and what’s next,” in Proceedings of the 55th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , 2017, pp. 473–483

2017

Earlier work this paper cites.

G. Ayoade, S. Chandra, L. Khan, K. Hamlen, and B. Thuraisingham, “Automated threat report classification over multi-source data,” in 2018 IEEE 4th International Conference on Collaboration and Internet Computing (CIC) . IEEE, 2018, pp. 236–245

2018

Earlier work this paper cites.

S. Gianvecchio, C. Burkhalter, H. Lan, A. Sillers, and K. Smith, “Closing the gap with apts through semantic clusters and automated cybergames,” in Security and Privacy in Communication Networks: 15th EAI International Conference, SecureComm 2019, Orlando, FL, USA, October 23-25, 2019, Proceedings, Part I 15 . Springer, 2019, pp. 235–254

2019

Earlier work this paper cites.

E. Hemberg, J. Kelly, M. Shlapentokh-Rothman, B. Reinstadler, K. Xu, N. Rutar, and U.-M. O’Reilly, “Linking threat tactics, techniques, and patterns with defensive weaknesses, vulnerabilities and affected platform configurations for cyber hunting,” arXiv preprint arXiv:2010.00533 , 2020

Original

2020

Cited alongside, same era.

B. Ampel, S. Samtani, S. Ullman, and H. Chen, “Linking common vulnerabilities and exposures to the mitre att&ck framework: A self-distillation approach,” arXiv preprint arXiv:2108.01696 , 2021

Original

2021

Cited alongside, same era.

C.-M. Chen, J.-Y. Kan, Y.-H. Ou, Z.-X. Cai, A. Guan et al. , “Threat action extraction using information retrieval,” in CS & IT Conference Proceedings , vol. 11, no. 7. CS & IT Conference Proceedings, 2021

2021

Cited alongside, same era.

A. Kuppa, L. Aouad, and N.-A. Le-Khac, “Linking cve’s to mitre att&ck techniques,” in Proceedings of the 16th International Conference on Availability, Reliability and Security , 2021, pp. 1–12

2021

Cited alongside, same era.

E. Aghaei, X. Niu, W. Shadid, and E. Al-Shaer, “Securebert: A domain-specific language model for cybersecurity,” in International Conference on Security and Privacy in Communication Systems . Springer, 2022, pp. 39–56

2022

Later among the works it cites.

O. Grigorescu, A. Nica, M. Dascalu, and R. Rughinis, “Cve2att&ck: Bert-based mapping of cves to mitre att&ck techniques,” Algorithms , vol. 15, no. 9, p. 314, 2022

2022

Later among the works it cites.

“AllenNLP Semantic Role Labeling Tool,” https://demo.allennlp.org/semantic-role-labeling , accessed: June 18, 2023

2023

Closest in time.

“Mapping MITRE ATT&CK® to CVEs for Impact,” https://github.com/center-for-threat-informed-defense/attack_to_cve , accessed: June 18, 2023

2023

Closest in time.

Y. Liu, T. Han, S. Ma, J. Zhang, Y. Yang, J. Tian, H. He, A. Li, M. He, Z. Liu et al. , “Summary of chatgpt/gpt-4 research and perspective towards the future of large language models,” arXiv preprint arXiv:2304.01852 , 2023