Seul-Ki Choi

Improving TTP Mapping Accuracy in CTI Reports Using Structured RAG Query Configuration

Accurately mapping attack behaviors described in Cyber Threat Intelligence (CTI) reports to the Tactics, Techniques, and Procedures (TTPs) of the MITRE ATT&CK framework is a critical challenge for responding to cyber threats and enhancing cyber resilience. However, traditional Large Language Model (LLM) and Retrieval-A...