arxivcs.CRcs.AI2026-07-22
An Automated Framework for Extracting Reachable Attack Chains from Cyber Threat Intelligence Reports
Wenbo Hou, Ning Hu, Xueping Wang, Jiahao Gu, Wenjian Luo
Cyber Threat Intelligence (CTI) reports richly describe real-world attack processes, but their unstructured narratives cannot be directly used for automated attack-path reasoning. Existing CTI extraction methods focus on indicators, entities, or TTP labels without modeling the ex…