A Structured Cyber Threat Intelligence Dataset Using STIX 2.1 Entities and MITRE ATT&CK Mappings

arXiv:2607.23312 · cs.CR · Submitted 2026-07-25 · Read on arXiv

Dipshikha Das, Arnab Banik, Md. Shariful Islam, Md Rayhanur Rahman

cs.CR

Submitted: 2026-07-25

Comments: 6 pages, 2 figures, 9 tables

Project page: https://oasis-open.github.io/cti-documen

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Knowledge Graph — 7× in this paper · explained in 7 episodes
Knowledge graphs — 5× in this paper · explained in 2 episodes
Actor — 4× in this paper · explained in 3 episodes
F1 Score — 4× in this paper · explained in 3 episodes
Graph Construction — 4× in this paper · explained in 3 episodes
LLM-as-a-Judge — 3× in this paper · explained in 3 episodes
Benchmark — 2× in this paper · explained in 2 episodes
Accuracy — 1× in this paper · explained in 1 episode
Aggregation — 1× in this paper · explained in 1 episode
Annotator Agreement — 1× in this paper · explained in 1 episode
Chain-of-Thought Prompting — 1× in this paper · explained in 2 episodes
Clustering — 1× in this paper · explained in 2 episodes
Downstream Tasks — 1× in this paper · explained in 2 episodes
Quantization — 1× in this paper · explained in 12 episodes
STIX Relationship Objects — 1× in this paper

Related papers