3 papers
cs.CR2026
BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence
Changze Li, Yutong Cheng, Tsania Camila Finnisa +3
Cyber threat intelligence (CTI) is foundational to modern cyber defense, yet much of it resides in unstructured reports whose volume and heterogeneity far exceed manual analysis, m…
cs.AI2026
CTIFoundry: An Agent-Native Corpus Scaffold for Cyber Threat Intelligence
Yutong Cheng, Changze Li, Qian Cui +4
Cyber threat intelligence (CTI) is increasingly consumed not by human analysts but by LLM agents that compose multi-step investigations at query time. The harness side of this shif…
cs.CR2026
TTPrint: Evidence-Grounded TTP Extraction via Diverge-then-Converge Verification
Yutong Cheng, Changze Li, Raihan Sultan Pasha Basuki +3
Extracting MITRE ATT&CK techniques from cyber threat intelligence (CTI) reports is an open-set, multi-label problem requiring both high recall (not missing techniques) and high pre…