Cybersecurity in the semantic web with MITRE D3FEND
summary
Claims that a semantic layer plus MITRE D3FEND knowledge graph can auto-generate attack/defense mappings for an architecture; implements a web-based mermaid.js editor where nodes are annotated with D3FEND keywords, converted into RDF/Neo4j and queried with Python (rdflib + custom scripts) to produce reports in ~20 seconds. The prototype exports linked references, suggests mitigations, and on a simple diagram surfaces 38 possible attacks; it is experimental but demonstrably functional.
AI-written summary · about
chapters (13)
- 0:00Introduction to semantic security
- 1:07Speaker background and context
- 2:16Classifying network nodes and attacks
- 5:11MITRE D3FEND knowledge graph
- 7:00Building the experimental tool
- 9:12Using Mermaid.js for diagrams
- 12:44Real-time security assessment
- 15:51Tool benefits and workflow
- 16:57Under the hood architecture
- 19:38Live demo and Q&A intro
- 23:17Pairing with MITRE ATT&CK
- 26:11Generating Mermaid graphs dynamically
- 29:00Closing and Q&A
related talks
13mMITRE D3FEND
13mMITRE D3FEND
26mImproving Cybersecurity Posture with an AI Security Assistant
20mDynamic Defense: Crafting threat models with real-world Intelligence
47mD2T2 - Defense-in-Depth Techniques for Modern Web Apps
20mAttack of the Graph: Visual Tools for Cyber Analysis
35mComplex Querying of Cyber Knowledge Graph for Robust Cyber Defense
29mPlease Don't Discard - Security Data