Ransomware Analysis Knowledge Extraction and Classification for Advanced Cyber Threat Intelligence

This book presents the development of a classification scheme to organize and represent ransomware threat knowledge through the implementation of an innovative methodology centered around the semantic annotation of domain-specific source documentation. By combining principles from computer science,...

Celý popis

Uložené v:
Podrobná bibliografia
Hlavní autori: Lanza, Claudia, Lahmadi, Abdelkader, François, Jérôme
Médium: E-kniha Publikácia Kniha
Jazyk:English
Vydavateľské údaje: Boca Raton, FL CRC Press 2024
Taylor & Francis
Vydanie:1
Predmet:
ISBN:1032867507, 9781032867502, 9781032832104, 103283210X, 1003528996, 9781003528999, 104018295X, 9781040182956, 1040182925, 9781040182925
On-line prístup:Získať plný text
Tagy: Pridať tag
Žiadne tagy, Buďte prvý, kto otaguje tento záznam!
Popis
Shrnutí:This book presents the development of a classification scheme to organize and represent ransomware threat knowledge through the implementation of an innovative methodology centered around the semantic annotation of domain-specific source documentation. By combining principles from computer science, document management, and semantic data processing, the research establishes an innovative framework to organize ransomware data extracted from specialized source texts in a systematic classification system. Through detailed chapters, the book explores the process of applying semantic annotation to a specialized corpus comprising CVE prose descriptions linked to known ransomware threats. This approach not only organizes but also deeply analyzes these descriptions, uncovering patterns and vulnerabilities within ransomware operations. The book presents a pioneering methodology that integrates CVE descriptions with ATT&CK frameworks, significantly refining the granularity of threat intelligence. The insights gained from a pattern-based analysis of vulnerability-related documentation are structured into a hierarchical model within an ontology framework, enhancing the capability for predictive operations. This model prepares cybersecurity professionals to anticipate and mitigate risks associated with new vulnerabilities as they are cataloged in the CVE list, by identifying recurrent characteristics tied to specific ransomware and related vulnerabilities. With real-world examples, this book empowers its readers to implement these methodologies in their environments, leading to improved prediction and prevention strategies in the face of growing ransomware challenges.
ISBN:1032867507
9781032867502
9781032832104
103283210X
1003528996
9781003528999
104018295X
9781040182956
1040182925
9781040182925
DOI:10.1201/9781003528999