To remain aware of the fast-evolving cyber threat landscape, open-source
Cyber Threat Intelligence (OSCTI) has received growing attention from the
community. Commonly, knowledge about threats is presented in a vast number of
OSCTI reports. Despite the pressing need for high-quality OSCTI, existing OSCTI
gathering and management platforms, however, have primarily focused on
isolated, low-level Indicators of Compromise. On the other hand, higher-level
concepts (e.g., adversary tactics, techniques, and procedures) and their
relationships have been overlooked, which contain essential knowledge about
threat behaviors that is critical to uncovering the complete threat scenario.
To bridge the gap, we propose SecurityKG, a system for automated OSCTI
gathering and management. SecurityKG collects OSCTI reports from various
sources, uses a combination of AI and NLP techniques to extract high-fidelity
knowledge about threat behaviors, and constructs a security knowledge graph.
SecurityKG also provides a UI that supports various types of interactivity to
facilitate knowledge graph exploration.

SecurityKG 是一种自动化的开源网络安全威胁情报收集管理系统，利用 AI 和 NLP 技术提取有关威胁行为的知识，构建安全知识图谱，从而弥补现有 OSCTI 收集和管理平台忽视高级概念及其关系的不足。