{"total":24,"rows":[{"id":"2211.01753","title":"Looking Beyond IoCs: Automatically Extracting Attack Patterns from External CTI","created":"2022-11-01","cited_by_count":27,"area":null},{"id":"2307.10214","title":"Time for aCTIon: Automated Analysis of Cyber Threat Intelligence in the Wild","created":"2023-07-14","cited_by_count":15,"area":null},{"id":"2407.02528","title":"Actionable Cyber Threat Intelligence using Knowledge Graphs and Large Language Models","created":"2024-06-30","cited_by_count":14,"area":null},{"id":"2410.21060","title":"CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models","created":"2024-10-28","cited_by_count":14,"area":null},{"id":"2509.10858","title":"Large Language Models for Security Operations Centers: A Comprehensive Survey","created":"2025-09-13","cited_by_count":9,"area":null},{"id":"2405.04753","title":"AttacKG+:Boosting Attack Knowledge Graph Construction with Large Language Models","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2503.03170","title":"AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understanding","created":"2025-03-05","cited_by_count":4,"area":null},{"id":"2408.04996","title":"On the use of neurosymbolic AI for defending against cyber attacks","created":"2024-08-09","cited_by_count":3,"area":null},{"id":"2503.03108","title":"OMNISEC: LLM-Driven Provenance-based Intrusion Detection via Retrieval-Augmented Behavior Prompting","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2401.01883","title":"Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2410.20287","title":"AI-Driven Cyber Threat Intelligence Automation","created":"2024-10-26","cited_by_count":2,"area":null},{"id":"2502.10825","title":"MITRE ATT&CK Applications in Cybersecurity and The Way Forward","created":"2025-02-15","cited_by_count":2,"area":null},{"id":"2601.14556","title":"Constructing Multi-label Hierarchical Classification Models for MITRE ATT&CK Text Tagging","created":"2026-01-21","cited_by_count":1,"area":null},{"id":"2605.16714","title":"GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction","created":"2026-05-15","cited_by_count":1,"area":null},{"id":"2605.25836","title":"CTI2TTP: Evidence-Grounded TTP Extraction from Cyber Threat Intelligence via Diverge-then-Converge Verification","created":"2026-05-25","cited_by_count":1,"area":null},{"id":"2606.18166","title":"Evaluating Open-Source LLMs for Multi-Label ATT&CK Technique Classification on CTI Reports","created":"2026-06-16","cited_by_count":1,"area":null},{"id":"2607.24563","title":"TRACE-CTI: Auditable Post-Extraction Governance of TTP Claims with Knowledge Graphs","created":"2026-07-27","cited_by_count":1,"area":null},{"id":"2411.06239","title":"Web Scale Graph Mining for Cyber Threat Intelligence","created":"2024-11-09","cited_by_count":0,"area":null},{"id":"2411.18755","title":"Cyber-Attack Technique Classification Using Two-Stage Trained Large Language Models","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2604.23905","title":"SMSI: System Model Security Inference: Automated Threat Modeling for Cyber-Physical Systems","created":"2026-04-26","cited_by_count":0,"area":null},{"id":"2606.18190","title":"Multi-Source Cybersecurity Logs: An ATT&CK-Labeled Dataset and SLM Evaluation","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2608.06778","title":"Retrieval-Constrained Policy Optimization for Attack Technique Extraction from Cyber Threat Intelligence","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.13050","title":"Operationalizing Cyber Threat Intelligence with GraphRAG","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2608.28394","title":"BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":null}