PulseAugur
实时 10:23:12

OntoLogX uses LLMs to extract actionable threat intelligence from cybersecurity logs

Researchers have developed OntoLogX, an AI agent designed to extract Cyber Threat Intelligence (CTI) from raw cybersecurity logs. The system utilizes Large Language Models (LLMs) combined with a lightweight log ontology and Retrieval Augmented Generation (RAG) to transform unstructured log data into structured Knowledge Graphs (KGs). OntoLogX also predicts MITRE ATT&CK tactics, linking low-level log evidence to higher-level adversarial objectives, and has demonstrated robust KG generation and accurate mapping of adversarial activity on benchmark and real-world datasets. AI

影响 Enhances CTI extraction from logs, potentially improving threat detection and response capabilities.

排序理由 Academic paper detailing a new AI agent for cybersecurity log analysis.

在 arXiv cs.AI 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

OntoLogX uses LLMs to extract actionable threat intelligence from cybersecurity logs

报道来源 [1]

  1. arXiv cs.AI TIER_1 English(EN) · Luca Cotti, Idilio Drago, Anisa Rula, Devis Bianchini, Federico Cerutti ·

    OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Models

    arXiv:2510.01409v2 Announce Type: replace Abstract: System logs represent a valuable source of Cyber Threat Intelligence (CTI), capturing attacker behaviors, exploited vulnerabilities, and traces of malicious activity. Yet their utility is often limited by lack of structure, sema…