Skip to main content

Unveiling Cybersecurity Threats fromĀ Online Chat Groups: A Triple Extraction Approach

  • Conference paper
  • First Online:
Knowledge Science, Engineering and Management (KSEM 2023)

Part of the book series: Lecture Notes in Computer Science ((LNAI,volume 14120))

  • 646 Accesses

Abstract

In recent years, instant messaging software has become a popular platform for hackers to exchange knowledge and discuss cybersecurity issues. To trace the source of key hackers and identify potential cybersecurity threats, it is necessary to extract relational triples from hacker dialogues in chat logs. In this paper, we propose a feasible scheme for extracting cybersecurity knowledge triples from an extensive corpus of diverse chat data. We developed a heuristic algorithm based on the BERT next sentence prediction task to separate sequential and asynchronous chat logs into shorter dialogues and disentangle these threads within them, which can improve the accuracy of the subsequent relation extraction process. We also annotated a dialogue relation extraction dataset and developed a relation extraction model tailored for cybersecurity domain. Experimental results demonstrate that our average F1 scores on the thread disentanglement task and the dialogue relation extraction task are 74.9 and 88.4, respectively.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 59.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 79.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    https://github.com/mamoe/mirai.

  2. 2.

    https://oasis-open.github.io/cti-documentation/stix/intro.

  3. 3.

    https://github.com/goto456/stopwords.

  4. 4.

    https://github.com/fxsjy/jieba.

  5. 5.

    https://github.com/microsoft/msticpy.

  6. 6.

    https://github.com/olbat/nvdcve.

References

  1. Elsner, M., Charniak, E.: You talking to me? a corpus and algorithm for conversation disentanglement. In: Proceedings of ACL-08: HLT. pp. 834ā€“842 (2008)

    Google ScholarĀ 

  2. He, H., Choi, J.D.: The stem cell hypothesis: Dilemma behind multi-task learning with transformer encoders. In: Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing. pp. 5555ā€“5577 (2021)

    Google ScholarĀ 

  3. Iqbal, F., Fung, B.C., Debbabi, M., Batool, R., Marrington, A.: Wordnet-based criminal networks mining for cybercrime investigation. IEEE Access 7, 22740ā€“22755 (2019)

    ArticleĀ  Google ScholarĀ 

  4. Li, S., Zhao, Z., Hu, R., Li, W., Liu, T., Du, X.: Analogical reasoning on chinese morphological and semantic relations. In: Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers). pp. 138ā€“143 (2018)

    Google ScholarĀ 

  5. Riou, M., Salim, S., Hernandez, N.: Using discursive information to disentangle french language chat. In: 2nd Workshop on Natural Language Processing for Computer-Mediated Communication (NLP4CMC 2015)/Social Media at GSCL Conference 2015. pp. 23ā€“27 (2015)

    Google ScholarĀ 

  6. Sabottke, C., Suciu, O., Dumitras, T.: Vulnerability disclosure in the age of social media: Exploiting twitter for predicting real-world exploits. In: 24th \(\{\)USENIX\(\}\) Security Symposium (\(\{\)USENIX\(\}\) Security 15). pp. 1041ā€“1056 (2015)

    Google ScholarĀ 

  7. Shen, D., Yang, Q., Sun, J.T., Chen, Z.: Thread detection in dynamic text message streams. In: Proceedings of the 29th annual international ACM SIGIR conference on Research and development in information retrieval. pp. 35ā€“42 (2006)

    Google ScholarĀ 

  8. Sinha, A., Midhush Manohar, T.K., Subramanian, S., Das, B.: Text segregation on asynchronous group chat. Procedia Comput. Sci. 171, 1371ā€“1380 (2020)

    Google ScholarĀ 

  9. Stenetorp, P., Pyysalo, S., Topić, G., Ohta, T., Ananiadou, S., Tsujii, J.: Brat: a web-based tool for nlp-assisted text annotation. In: Proceedings of the Demonstrations at the 13th Conference of the European Chapter of the Association for Computational Linguistics. pp. 102ā€“107 (2012)

    Google ScholarĀ 

  10. Wang, D., Liu, Y.: A pilot study of opinion summarization in conversations. In: Proceedings of the 49th annual meeting of the Association for Computational Linguistics: Human language technologies. pp. 331ā€“339 (2011)

    Google ScholarĀ 

  11. Wolf, T., et al.: Transformers: State-of-the-art natural language processing. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing: System Demonstrations. pp. 38ā€“45 (2020)

    Google ScholarĀ 

  12. Xue, F., Sun, A., Zhang, H., Chng, E.S.: GdpNet: refining latent multi-view graph for relation extraction. In: Proceedings of the AAAI Conference on Artificial Intelligence. vol. 35, pp. 14194ā€“14202 (2021)

    Google ScholarĀ 

  13. Xue, F., Sun, A., Zhang, H., Ni, J., Chng, E.S.: An embarrassingly simple model for dialogue relation extraction. In: ICASSP 2022ā€“2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). pp. 6707ā€“6711. IEEE (2022)

    Google ScholarĀ 

  14. Yao, Y., et al.: DocRED: a large-scale document-level relation extraction dataset. arXiv preprint arXiv:1906.06127 (2019)

  15. Yu, D., Sun, K., Cardie, C., Yu, D.: Dialogue-based relation extraction. In: Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics. pp. 4927ā€“4940 (2020)

    Google ScholarĀ 

  16. Yu, T., Joty, S.: Online conversation disentanglement with pointer networks. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP). pp. 6321ā€“6330 (2020)

    Google ScholarĀ 

Download references

Acknowledgements

This work was supported in part by National Key Research and Development Program of China (No.2021YFB3100500) and Sichuan Science and Technology Program (No.2023YFG0162).

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Cheng Huang .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

Ā© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Yang, Z., Huang, C., Liu, J. (2023). Unveiling Cybersecurity Threats fromĀ Online Chat Groups: A Triple Extraction Approach. In: Jin, Z., Jiang, Y., Buchmann, R.A., Bi, Y., Ghiran, AM., Ma, W. (eds) Knowledge Science, Engineering and Management. KSEM 2023. Lecture Notes in Computer Science(), vol 14120. Springer, Cham. https://doi.org/10.1007/978-3-031-40292-0_15

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-40292-0_15

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-40291-3

  • Online ISBN: 978-3-031-40292-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics