knowledge graph for security, Cybersecurity
Ontology
entities，attributes，relationships
node
- host detection
- process detection
edge
- attack prediction
- attack tracing
subgraph
- attack chain
基于资产、用户等信息的环境数据图
基于告警、安全日志的行为数据图
基于外部威胁情报的情报数据图
基于各类知识库（如ATT&CK、CAPEC、CWE等）的知识数据图
| year | title | C/J |
|---|---|---|
| 2021 | Open-CyKG: An Open Cyber Threat Intelligence Knowledge Graph | |
| 2021 | 网络安全知识图谱关键技术. http://www.jfdc.cnic.cn/article/2021/1674-9480/1674-9480-3-3-9.shtml | |
| 2021 | NETWORK ATTACK PATH PREDICTION BASED ON VULNERABILITY DATA AND KNOWLEDGE GRAPH http://www.ijicic.org/ijicic-170518.pdf | |
| 2019 | HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows | S&P |
| 2019 | Automatic Analysis and Reasoning Based on Vulnerability Knowledge Graph https://link.springer.com/chapter/10.1007/978-981-15-1922-2_1 | |
| 2018 | A Practical Approach to Constructing a Knowledge Graph for Cybersecurity https://www.sciencedirect.com/science/article/pii/S2095809918301097 | Engineering |
| 2017 | KGBIAC: Knowledge Graph Based Intelligent Alert Correlation Framework | CCS |
| 2016 | HERCULE: Attack Story Reconstruction via Community Discovery on Correlated Log Graph | |
| 2016 | CyGraph: Graph-Based Analytics and Visualization fo Cybersecurity | |
| 2016 | UCO: A Unified Cybersecurity Ontology | aaai |
| 2015 | Big-Data Architecture for Cyber Attack Graphs | |
| 2015 | Developing an Ontology for Cyber Security Knowledge Graphs. https://github.com/stucco/ontology | |
| title | site |
|---|---|
| 知识图谱在网络安全领域的应用 | https://zhuanlan.zhihu.com/p/347872920 |
| 基于图挖掘的安全事件分析 | https://mp.weixin.qq.com/s/ARfMqrUxiPKmbMcV_yaluw |
| 如何应用“安全知识图谱”识别内部威胁 | https://www.freebuf.com/column/230841.html |
| Detecting and Predicting Malicious Access in Enterprise Networks Using the Louvain Community Detection Algorithm | https://www.silverfort.com/blog/detecting-and-predicting-malicious-access-in-enterprise-networks-using-the-louvain-community-detection-algorithm/ |
| 绿盟科技安全知识图谱技术白皮书 | |
| VulGraph |