Abstract:The extraction of entities and relationships from threat intelligence reports into structured formats, such as cybersecurity knowledge graphs, is essential for automated threat analysis, detection, and mitigation. However, existing joint extraction methods struggle with feature confusion, language ambiguity, noise propagation, and overlapping relations, resulting in low accuracy and poor model performance. This paper presents TIJERE, an innovative joint entity and relation extraction framework that formulates joint extraction as a multisequence labeling representation (MSLR) problem. Specifically, separate sequences are generated for each entity pair. Unlike prior tagging schemes, MSLR integrates expert domain features to enrich positional, contextual, and semantic representations of entities, thereby enhancing feature distinction and classification accuracy. Additionally, TIJERE reduces language ambiguity and enhances domain-specific generalization by leveraging SecureBERT+, a contextual language model fine-tuned on cybersecurity text. This improves both named entity recognition (NER) and relation extraction (RE). This paper also introduces DNRTI-JE, the first publicly available jointly labeled dataset for cybersecurity entity and RE, filling a crucial gap in cyber threat intelligence automation. Empirical evaluations on the curated DNRTI-JE dataset demonstrate that TIJERE achieves state-of-the-art performance, with F1-scores exceeding 0.93 for NER and 0.98 for RE, outperforming existing methods. Together, TIJERE and the standardized benchmarking DNRTI-JE dataset enable high-performance cybersecurity intelligence extraction, with transferable applications in healthcare, finance, and bioinformatics.
| Comments: | 16 pages |
| Subjects: | Machine Learning (cs.LG) |
| Cite as: | arXiv:2605.02041 [cs.LG] |
| (or arXiv:2605.02041v1 [cs.LG] for this version) | |
| https://doi.org/10.48550/arXiv.2605.02041 arXiv-issued DOI via DataCite (pending registration) |
|
| Journal reference: | Knowledge-Based Systems, Volume 329, Part A, 2025, 114346, ISSN 0950-7051 |
| Related DOI: | https://doi.org/10.1016/j.knosys.2025.114346
DOI(s) linking to related resources |
From: Inoussa Mouiche Dr [view email]
[v1]
Sun, 3 May 2026 20:10:02 UTC (1,024 KB)
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。