63 citations · 90 across the 9 of their papers we have counts for
9 papers
A Structured Cyber Threat Intelligence Dataset Using STIX 2.1 Entities and MITRE ATT&CK Mappings
Dipshikha Das, Arnab Banik, Md. Shariful Islam +1
Cyber threat intelligence (CTI) reports are typically written in unstructured formats, which complicates the extraction and analysis of important entities and adversarial behaviors…
Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports
Md Rayhanur Rahman, Brandon Wroblewski, Quinn Matthews +3
Defending from cyberattacks requires practitioners to operate on high-level adversary behavior. Cyberthreat intelligence (CTI) reports on past cyberattack incidents describe the ch…
Attackers reveal their arsenal: An investigation of adversarial techniques in CTI reports
Md Rayhanur Rahman, Setu Kumar Basak, Rezvan Mahdavi Hezaveh +1
Context: Cybersecurity vendors often publish cyber threat intelligence (CTI) reports, referring to the written artifacts on technical and forensic analysis of the techniques used b…
An investigation of security controls and MITRE ATT\&CK techniques
Md Rayhanur Rahman, Laurie Williams
Attackers utilize a plethora of adversarial techniques in cyberattacks to compromise the confidentiality, integrity, and availability of the target organizations and systems. Infor…
Investigating co-occurrences of MITRE ATT\&CK Techniques
Md Rayhanur Rahman, Laurie Williams
Cyberattacks use adversarial techniques to bypass system defenses, persist, and eventually breach systems. The MITRE ATT\&CK framework catalogs a set of adversarial techniques and…
From Threat Reports to Continuous Threat Intelligence: A Comparison of Attack Technique Extraction Methods from Textual Artifacts
Md Rayhanur Rahman, Laurie Williams
The cyberthreat landscape is continuously evolving. Hence, continuous monitoring and sharing of threat intelligence have become a priority for organizations. Threat reports, publis…
What are the attackers doing now? Automating cyber threat intelligence extraction from text on pace with the changing threat landscape: A survey
Md Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie Williams
Cybersecurity researchers have contributed to the automated extraction of CTI from textual sources, such as threat reports and online articles, where cyberattack strategies, proced…
Security Smells in Ansible and Chef Scripts: A Replication Study
Akond Rahman, Md. Rayhanur Rahman, Chris Parnin +1
Context: Security smells are recurring coding patterns that are indicative of security weakness, and require further inspection. As infrastructure as code (IaC) scripts, such as An…
MobiCoMonkey - Context Testing of Android Apps
Amit Seal Ami, Md. Mehedi Hasan, Md. Rayhanur Rahman +1
The functionality of many mobile applications is dependent on various contextual, external factors. Depending on unforeseen scenarios, mobile apps can even malfunction or crash. In…