Inference of Cyber Threats, Vulnerabilities, and Mitigations to Enhance Cybersecurity Simulations

Machine Learning techniques can provide insight in a variety of inference tasks involving not only text data but also source code. We apply these techniques to BRON, a graph database linking cybersecurity threats, vulnerability sources, and mitigation techniques, in order to extract a wider variety...

Full description

Bibliographic Details
Main Author: Liu, Kyle
Other Authors: Hemberg, Erik
Format: Thesis
Published: Massachusetts Institute of Technology 2023
Online Access:https://hdl.handle.net/1721.1/151545
Description
Summary:Machine Learning techniques can provide insight in a variety of inference tasks involving not only text data but also source code. We apply these techniques to BRON, a graph database linking cybersecurity threats, vulnerability sources, and mitigation techniques, in order to extract a wider variety of relationships, and more effectively analyze them. We find that prompt engineering in large language models improves performance in edge classification within BRON. We in addition explore these inferences in practice, by modeling the interaction between cybersecurity attackers and defenders on a given network in a zero-sum game. We apply coevolution in a novel multi-step feedback framework to improve performance in modelling attacks, and find that allowing attackers to dynamically select their attack strategies improves their payoff.