DeBERTaIC: A Framework for Cyber Threat Analysis Integrating DeBERTa Model and Attack Intelligence Chain

作者：Kai Cheng, Weidong Tang, Lintao Tan, Xin Li, Jing Yang · 发表于：IEEE Transactions on Consumer Electronics · 年份：2025 · DOI：10.1109/tce.2025.3575279 · 被引用次数：3 · 研究领域：Intelligence, Security, War Strategy

As the Internet of Things (IoT) technology advances, the Consumer Electronics (CE) sector is experiencing continuous growth, with more and more CE devices connecting to the network. This has led to an expansion of the attack surface and an increase in cyber threats, posing challenges to traditional network security defenses. Consequently, many organizations have started to use Cyber Threat Intelligence (CTI) to counter emerging cyber threats in a timely manner. However, current methods still face issues with balancing analysis accuracy and efficiency, as well as difficulties in visual presentation. To address these issues, this paper presents DeBERTaIC, a technical framework for analyzing and visualizing cyber attacks in CE networks. First, we develop a DeBERTa-BiGRU-CRF model for named entity recognition. DeBERTa’s strong contextual understanding enables accurate identification of entity boundaries and extraction of key named entity information related to cyber attacks. Second, we design a DeBERTa -SVD -LightGBM model for attack-type recognition. Singular Value Decomposition (SVD) is used to extract input text features, and LightGBM is employed for rapid classification to ensure efficiency. Finally, by integrating information from the first two steps, we construct an attack intelligence chain based on the ATT&CK framework, graphically presenting attack sources, paths, targets, and types. This provides an intuitive analysis tool for decision makers to identify threats and for...