Automatic mapping based on CVE and ATT&CK

Lei Wang; Li Sun; Duo Shang; Huihong He; Guangtao Nie; Haikuo Dong

doi:10.1117/12.3032103

6 June 2024 Automatic mapping based on CVE and ATT&CK

Lei Wang, Li Sun, Duo Shang, Huihong He, Guangtao Nie, Haikuo Dong

Proceedings Volume 13175, International Conference on Computer Network Security and Software Engineering (CNSSE 2024); 131751C (2024) https://doi.org/10.1117/12.3032103
Event: 4th International Conference on Computer Network Security and Software Engineering (CNSSE 2024), 2024, Sanya, China

Abstract

The CVE is a database of cyber security vulnerabilities that describe the characteristics of vulnerabilities. MITRE ATT&CK formalizes attack patterns (including attack tactics and techniques) through abstract theory, and gives corresponding mitigation schemes, so it is significant to identify ATT&CK attack information from CVE. Since there is no link between the two, this paper proposes a Transformer-based mapping scheme to automatically map CVE’s to ATT&CK, and verify it on the CVE dataset, which has a good mapping effect and provides security operators with Intuitive reference.

(2024) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Lei Wang, Li Sun, Duo Shang, Huihong He, Guangtao Nie, and Haikuo Dong "Automatic mapping based on CVE and ATT&CK", Proc. SPIE 13175, International Conference on Computer Network Security and Software Engineering (CNSSE 2024), 131751C (6 June 2024); https://doi.org/10.1117/12.3032103

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available