knowledge graph for security, Cybersecurity

graph

build

Ontology

entities，attributes，relationships

application

node

• host detection
• process detection

edge

• attack prediction
• attack tracing

subgraph

• attack chain

topic

基于资产、用户等信息的环境数据图

基于告警、安全日志的行为数据图

基于外部威胁情报的情报数据图

基于各类知识库（如ATT&CK、CAPEC、CWE等）的知识数据图

paper

year	title	C/J
2021	Open-CyKG: An Open Cyber Threat Intelligence Knowledge Graph
2021	网络安全知识图谱关键技术. http://www.jfdc.cnic.cn/article/2021/1674-9480/1674-9480-3-3-9.shtml
2021	NETWORK ATTACK PATH PREDICTION BASED ON VULNERABILITY DATA AND KNOWLEDGE GRAPH http://www.ijicic.org/ijicic-170518.pdf
2019	HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows	S&P
2019	Automatic Analysis and Reasoning Based on Vulnerability Knowledge Graph https://link.springer.com/chapter/10.1007/978-981-15-1922-2_1
2018	A Practical Approach to Constructing a Knowledge Graph for Cybersecurity https://www.sciencedirect.com/science/article/pii/S2095809918301097	Engineering
2017	KGBIAC: Knowledge Graph Based Intelligent Alert Correlation Framework	CCS
2016	HERCULE: Attack Story Reconstruction via Community Discovery on Correlated Log Graph
2016	CyGraph: Graph-Based Analytics and Visualization fo Cybersecurity
2016	UCO: A Unified Cybersecurity Ontology	aaai
2015	Big-Data Architecture for Cyber Attack Graphs
2015	Developing an Ontology for Cyber Security Knowledge Graphs. https://github.com/stucco/ontology

blog/other

title	site
知识图谱在网络安全领域的应用	https://zhuanlan.zhihu.com/p/347872920
基于图挖掘的安全事件分析	https://mp.weixin.qq.com/s/ARfMqrUxiPKmbMcV_yaluw
如何应用“安全知识图谱”识别内部威胁	https://www.freebuf.com/column/230841.html
Detecting and Predicting Malicious Access in Enterprise Networks Using the Louvain Community Detection Algorithm	https://www.silverfort.com/blog/detecting-and-predicting-malicious-access-in-enterprise-networks-using-the-louvain-community-detection-algorithm/
绿盟科技安全知识图谱技术白皮书
VulGraph