Merging Cyber Threat Intelligence Through Retrieval-Augmented Generation and Small Language Models for Rich Threat Representation
An automated pipeline is proposed that derives an actionable representation of a cyberattack from heterogeneous CTI sources and produces an enriched Attack Graph that captures a coarse, tactic-aligned progression of the attack and annotates each step with explicit pre-conditions and post-conditions, and an enriched description.
Nicola Deidda, L. Regano, Alessandro Sanna et al.
· 0 citations