A Novel Approach for Cyber Threat Analysis Systems Using BERT Model from Cyber Threat Intelligence Data

Basit Öğe Kaydı
dc.contributor.authorDemirol, Doygun
dc.contributor.authorDas, Resul
dc.contributor.authorHanbay, Davut
dc.date.accessioned2026-04-04T13:30:56Z
dc.date.available2026-04-04T13:30:56Z
dc.date.issued2025
dc.departmentİnönü Üniversitesi
dc.description.abstractAs today's cybersecurity environment is becoming increasingly complex, it is crucial to analyse threats quickly and effectively. A delayed response or lack of foresight can lead to data loss, reputational damage, and operational disruptions. Therefore, developing methods that can rapidly extract valuable threat intelligence is a critical need to strengthen defence strategies and minimise potential damage. This paper presents an innovative approach that integrates knowledge graphs and a fine-tuned BERT-based model to analyse cyber threat intelligence (CTI) data. The proposed system extracts cyber entities such as threat actors, malware, campaigns, and targets from unstructured threat reports and establishes their relationships using an ontology-driven framework. A named entity recognition dataset was created and a BERT-based model was trained. To address the class imbalance, oversampling and a focal loss function were applied, achieving an F1 score of 96%. The extracted entities and relationships were visualised and analysed using knowledge graphs, enabling the advanced threat analysis and prediction of potential attack targets. This approach enhances cyber-attack prediction and prevention through knowledge graphs.
dc.identifier.doi10.3390/sym17040587
dc.identifier.issn2073-8994
dc.identifier.issue4
dc.identifier.orcid0000-0002-3272-1078
dc.identifier.orcid0000-0003-2271-7865
dc.identifier.orcid0000-0002-6113-4649
dc.identifier.scopus2-s2.0-105003645978
dc.identifier.scopusqualityQ1
dc.identifier.urihttps://doi.org/10.3390/sym17040587
dc.identifier.urihttps://hdl.handle.net/11616/108475
dc.identifier.volume17
dc.identifier.wosWOS:001475625900001
dc.identifier.wosqualityQ2
dc.indekslendigikaynakWeb of Science
dc.indekslendigikaynakScopus
dc.language.isoen
dc.publisherMdpi
dc.relation.ispartofSymmetry-Basel
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanı
dc.rightsinfo:eu-repo/semantics/openAccess
dc.snmzKA_WOS_20250329
dc.subjectcyber threat intelligence
dc.subjectknowledge graphs
dc.subjectnamed entity recognition
dc.subjectpre-trained language model
dc.titleA Novel Approach for Cyber Threat Analysis Systems Using BERT Model from Cyber Threat Intelligence Data
dc.typeArticle

Dosyalar

Koleksiyon

WoS İndeksli Yayınlar Koleksiyonu
Scopus İndeksli Yayınlar Koleksiyonu