Operationalising Cyber Risk Management Using AI: Connecting Cyber Incidents to MITRE ATT&CK Techniques, Security Controls, and Metrics

Dimensions overall score 9.0

GitHub Code Pulse

No public code linked for this paper yet.

• A novel framework is presented that uses Natural Language Processing to automate the mapping of cyber incidents to adversary techniques.method 95%
• The Cyber Catalog, a knowledge base integrating CIS Critical Security Controls, MITRE ATT&CK techniques, and SMART metrics, is introduced.technical 95%
• The all-mpnet-base-v2 sentence-transformers model was fine-tuned on an augmented dataset of 74,986 incident-technique pairs.method 95%
• The fine-tuned model achieved a Spearman correlation of 0.7894 and Pearson correlation of 0.8756.result 95%
• The fine-tuned model exhibited lower prediction errors (MAE = 0.135, MSE = 0.027) compared to baseline models.result 95%
• The Cyber Catalog, training dataset, trained model, and implementation code are publicly available.technical 95%
• The research addresses challenges faced by small enterprises with limited cyber security expertise and resources.market 90%

Competitive landscape

Competitor map is still being generated for this paper. Enable generation or check back soon.

Startup potential card