Ai-driven multi-faceted cyber threat classification and categorization

Abstract

Classifying cybersecurity signals from media sources into distinct categories is provided. The method comprises receiving a first data subset comprising data points labeled by subject matter experts according to a predetermined number of specified categories. The data points include information regarding cybersecurity from a set of news articles. The first subset is enriched by applying a random forest algorithm to generate synthetic data points, thereby deriving a second data subset that is augmented from the first subset. The combined first and second data subsets comprise an enhanced training dataset. A BERT model is trained with the enhanced training dataset to classify cybersecurity-related news according to the specified categories. The BERT model utilizes a specialized vector database integrating domain-specific cyber-related terminology and contextual embeddings. The trained BERT model classifies a second set of news articles according to the specified categories. The classification accounts for evolving cybersecurity terminologies and threat landscapes.