Peter Bosch


2024

pdf bib
Comprehensive threat analysis and systematic mapping of CVEs to MITRE framework
Stefano Simonetto | Peter Bosch
Proceedings of the First International Conference on Natural Language Processing and Artificial Intelligence for Cyber Security

This research addresses the significance of threat intelligence by presenting a practical approach to generate a labeled dataset for mapping CVEs to MITRE. By linking Common Vulnerabilities and Exposures (CVEs) with the MITRE ATT&CK framework, the paper outlines a scheme that integrates the extensive CVE database with the techniques and tactics of the ATT&CK knowledge base. The core contribution lies in a detailed methodology designed to map CVEs onto corresponding ATT&CK techniques and, in turn, to tactics through a data-driven perspective, centering specifically on the labeling provided by NIST. This procedure enhances our understanding of cybersecurity threats and yields a structured, labeled dataset essential for practical threat analysis. It facilitates and improves the recognition and categorization of cybersecurity threats. Furthermore, the paper analyses the dataset in the context of cyber-threat intelligence. It highlights how vulnerability understanding and awareness have improved over the years through the continuous effort to place vulnerabilities in the context of an attack by linking it to abstract techniques. The dataset allows for a comprehensive cyber attack stage and kill-chain analysis. It serves as a training resource for algorithm development in various use cases, such as threat detection and large language model fine-tuning.

2003

pdf bib
Demonstrative Pronouns and Personal Pronouns: German der vs er
Peter Bosch | Tom Rozario | Yufan Zhao
Proceedings of the 2003 EACL Workshop on The Computational Treatment of Anaphora

2001

pdf bib
Against the Identification of Anaphora and Presupposition
Peter Bosch
Proceedings of the Second SIGdial Workshop on Discourse and Dialogue