From Threat Intelligence to Detection: Knowledge-driven Enrichment and Template-based Rule Grounding for Automated Sigma Rule Generation
从威胁情报到检测:知识驱动的丰富化与基于模板的规则落地用于自动化Sigma规则生成
专题命中 测试生成 :repository(abstract);分类 cs.AI
AI总结 本研究设计了AUTOSIGMA,结合知识驱动丰富化等技术,将非结构化CTI报告自动生成Sigma规则,其在多项指标上优于其他方案。
Comments Submitted for publication and currently under review