Malware Knowledge Graph Generation

2021-02-10 · Sharmishtha Dutta, Nidhi Rastogi, Destin Yee, Chuqiao Gu, Qicheng Ma

Cyber threat and attack intelligence information are available in non-standard format from heterogeneous sources. Comprehending them and utilizing them for threat intelligence extraction requires engaging security experts. Knowledge graphs enable converting this unstructured information from heterogeneous sources into a structured representation of data and factual knowledge for several downstream tasks such as predicting missing information and future threat trends. Existing large-scale knowledge graphs mainly focus on general classes of entities and relationships between them. Open-source knowledge graphs for the security domain do not exist. To fill this gap, we've built \textsf{TINKER} - a knowledge graph for threat intelligence (\textbf{T}hreat \textbf{IN}telligence \textbf{K}nowl\textbf{E}dge g\textbf{R}aph). \textsf{TINKER} is generated using RDF triples describing entities and relations from tokenized unstructured natural language text from 83 threat reports published between 2006-2021. We built \textsf{TINKER} using classes and properties defined by open-source malware ontology and using hand-annotated RDF triples. We also discuss ongoing research and challenges faced while creating \textsf{TINKER}.

📄 PDF Abstract BibTeX arXiv:2102.05583

Code (0)

등록된 구현이 없습니다.

Tasks

Graph Generation Knowledge Graphs

MALOnt: An Ontology for Malware Threat Intelligence

2020-06-20 · Nidhi Rastogi, Sharmishtha Dutta, Mohammed J. Zaki, Alex Gittens 외

Malware threat intelligence uncovers deep information about malware, threat actors, and their tactics, Indicators of Compromise(IoC), and vulnerabilities in different platforms from scattered threat sources. This collect…

Decision Making Graph Generation Knowledge Graphs

Ontology-driven Knowledge Graph for Android Malware

2021-09-03 · Ryan Christian, Sharmishtha Dutta, Youngja Park, Nidhi Rastogi

We present MalONT2.0 -- an ontology for malware threat intelligence \cite{rastogi2020malont}. New classes (attack patterns, infrastructural resources to enable attacks, malware analysis to incorporate static analysis, an…

Articles Malware Analysis

Graph Neural Network-based Android Malware Classification with Jumping Knowledge

2022-01-19 · Wai Weng Lo, Siamak Layeghy, Mohanad Sarhan, Marcus Gallagher 외

This paper presents a new Android malware detection method based on Graph Neural Networks (GNNs) with Jumping-Knowledge (JK). Android function call graphs (FCGs) consist of a set of program functions and their inter-proc…

Android Malware Detection Graph Neural Network Malware Classification Malware Detection

Clustering based opcode graph generation for malware variant detection

2022-11-18 · Kar Wai Fok, Vrizlynn L. L. Thing

Malwares are the key means leveraged by threat actors in the cyber space for their attacks. There is a large array of commercial solutions in the market and significant scientific research to tackle the challenge of the …

Clustering Graph Generation Malware Detection

LCC-LLM: Leveraging Code-Centric Large Language Models for Malware Attribution

2026-05-07 · Christopher G. Pedraza Pohlenz, Hassan Jalil Hadi, Ali Hassan, Ali Shoker arxiv

LLMs are increasingly explored for malware analysis; however, current LLM-based malware attribution remains limited by unsupported indicators and insufficient code-level grounding for identifying malicious and vulnerable…

Semantic Similarity