Awesome Threat Intelligence
Threat Intelligence is one of the most active areas in Awesome Cybersecurity — 239 papers in this collection, evaluated on datasets like MITRE ATT&CK, CICIDS2017, VirusTotal. A strong starting point is "Survey On Federated Learning Threats: Concepts, Taxonomy On Attacks And Defences, Experimental Study And Challenges".
Datasets & benchmarks
Key papers
- Survey On Federated Learning Threats: Concepts, Taxonomy On Attacks And Defences, Experimental Study And Challenges (2022)Nuria Rodríguez-Barroso, Daniel Jiménez López, M. Victoria Luzón, et al.18.11
- Attackg: Constructing Technique Knowledge Graph From Cyber Threat Intelligence Reports (2021)Zhenyuan Li, Jun Zeng, Yan Chen, et al.16.19
- EXTRACTOR: Extracting Attack Behavior From Threat Reports (2021)Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan15.88
- A Survey On Explainable Artificial Intelligence For Cybersecurity (2023)Gaith Rjoub, Jamal Bentahar, Omar Abdel Wahab, et al.14.90
- Malware Detection And Prevention Using Artificial Intelligence Techniques (2022)Md Jobair Hossain Faruk, Hossain Shahriar, Maria Valero, et al.13.84
- A Cyber Kill Chain Based Taxonomy Of Banking Trojans For Evolutionary Computational Intelligence (2018)Dennis Kiwia, Ali Dehghantanha, Kim-Kwang Raymond Choo, et al.13.44
- Deephunter: A Graph Neural Network Based Approach For Robust Cyber Threat Hunting (2021)Renzheng Wei, Lijun Cai, Aimin Yu, et al.12.99
- Exploring The Dark Side Of AI: Advanced Phishing Attack Design And Deployment Using Chatgpt (2023)Nils Begou, Jeremy Vinoy, Andrzej Duda, et al.11.29
- Enhancing Threat Detection Using Artificial Intelligence in Modern Cybersecurity Systems Using SPSS Statistics (2026)Rajendar Dommeti10.82
- DOLOS: A Novel Architecture For Moving Target Defense (2023)Giulio Pagnotta, Fabio de Gaspari, Dorjan Hitaj, et al.10.74
- Ctibench: A Benchmark For Evaluating Llms In Cyber Threat Intelligence (2024)Md Tanvirul Alam, Dipkamal Bhusal, Le Nguyen, et al.10.48
- Multi-features Based Semantic Augmentation Networks For Named Entity Recognition In Threat Intelligence (2022)Peipei Liu, Hong Li, Zuoguang Wang, et al.9.59
- Recent Advancements In Machine Learning For Cybercrime Prediction (2023)Lavanya Elluri, Varun Mandalapu, Piyush Vyas, et al.9.41
- Ransomai: Ai-powered Ransomware For Stealthy Encryption (2023)Jan von Der Assen, Alberto Huertas Celdrán, Janik Luechinger, et al.8.82
- SAGE: Intrusion Alert-driven Attack Graph Extractor (2021)Azqa Nadeem, Sicco Verwer, Shanchieh Jay Yang8.09
- Autonomous Threat Detection And Response In Cloud Security: A Comprehensive Survey Of Ai-driven Strategies (2026)Gaurav Sarraf, Vibhor Pal7.84
- Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks (2026)John T. Halloran et al.6.69
- Large Language Models Are Unreliable For Cyber Threat Intelligence (2025)Emanuele Mezzi, Fabio Massacci, Katja Tuma6.64
- Psyborg+: Modeling And Simulation For Detecting Cognitive Biases In Advanced Persistent Threats (2024)Shuo Huang, Fred Jones, Nikolos Gurney, et al.6.34
- HAPSSA: Holistic Approach To PDF Malware Detection Using Signal And Statistical Analysis (2021)Tajuddin Manhar Mohammed, Lakshmanan Nataraj, Satish Chikkagoudar, et al.6.34
- A Comprehensive Survey Of Advanced Persistent Threat Attribution: Taxonomy, Methods, Challenges And Open Research Problems (2024)Nanda Rani, Bikash Saha, Sandeep Kumar Shukla6.34
- A Cyber Threat Intelligence Sharing Scheme Based On Federated Learning For Network Intrusion Detection (2021)Mohanad Sarhan, Siamak Layeghy, Nour Moustafa, et al.6.34
- Community Targeted Phishing: A Middle Ground Between Massive And Spear Phishing Through Natural Language Generation (2017)Alberto Giaretta, Nicola Dragoni5.84
- Jasmine: A New Active Learning Approach To Combat Cybercrime (2021)Jan Klein, Sandjai Bhulai, Mark Hoogendoorn, et al.5.84
- Agentic Intelligence for Unified Cyber Defense: A Self-Adaptive Framework for Threat Detection Across Cloud, Edge, and IoT Systems (2026)B. Vijetha5.58
- Ex-nids: A Framework For Explainable Network Intrusion Detection Leveraging Large Language Models (2025)Paul R. B. Houssel, Siamak Layeghy, Priyanka Singh, et al.5.46
- Exemplifying Emerging Phishing: QR-based Browser-in-The-Browser (BiTB) Attack (2025)Muhammad Wahid Akram et al.5.40
- Unraveling Threat Intelligence Through The Lens Of Malicious URL Campaigns (2022)Mahathir Almashor, Ejaz Ahmed, Benjamin Pick, et al.5.24
- MalDataGen: A Modular Framework for Synthetic Tabular Data Generation in Malware Detection (2025)Kayua Oleques Paim and Angelo Gaspar Diniz Nogueira and Diego Kreutz and Weverton Cordeiro and Rodrigo Brandao Mansilha4.80
- Adaphish: Ai-powered Adaptive Defense And Education Resource Against Deceptive Emails (2025)Rei Meguro, Ng S. T. Chong4.53
- Robust Intrusion Detection System With Explainable Artificial Intelligence (2025)Betül Güvenç Paltun, Ramin Fuladi, Rim El Malki4.53
- Discovering Command And Control (C2) Channels On Tor And Public Networks Using Reinforcement Learning (2024)Cheng Wang, Christopher Redino, Abdul Rahman, et al.4.52
- A Proactive Decoy Selection Scheme For Cyber Deception Using MITRE ATT&CK (2024)Marco Zambianco, Claudio Facchinetti, Domenico Siracusa4.52
- SwarmSense-DNN: A Trustworthy and Decentralized Neural Framework for Proactive Anomaly Defense in Consumer IoT (2026)Jing Yang et al.4.39
- TwinBI: An Agentic Digital Twin for Efficient Augmented Interactions with Business Intelligence Dashboards (2026)Jisoo Jang Wen-Syan Li4.39
- The Silent Cost of Artificial Intelligence Assistance: A Theory of Autonomy Surrender, the Recovery Mechanism, and the Restoration of Human Agency (2026)Ancuta Margondai et al.4.39
- When Should Agent Trust Be Conditional? Characterizing and Attacking Skill-Conditional Reputation in Agent Swarms (2026)Yihan Xia et al.4.39
- AgentCyberRange: Benchmarking Frontier AI Systems in Realistic Cyber Ranges (2026)Fengyu Liu et al.4.39
- Security Threats and Their Impact on Blockchain Interoperability: Identification and Countermeasures (2026)Shawn M. Reynolds et al.4.39
- Can Quantum Federated Learning Withstand Circuit-Level Backdoors? (2026)Aakar Mathur et al.4.33
- Towards Cybersecurity SuperIntelligence (CSI): What's the best harness for cybersecurity? (2026)V\'ictor Mayoral-Vilches et al.4.33
- Energy-efficient threat detection in IoT healthcare using AI and blockchain-enhanced fog–cloud architecture (2026)M. Alamri et al.4.26
- AI-Driven Cybercrime Forensics for Predictive Threat Detection and Investigative Intelligence (2026)Atif Khan4.26
- Few-shot Learning-based Cyber Incident Detection With Augmented Context Intelligence (2025)Fei Zuo, Junghwan Rhee, Yung Ryn Choe, et al.3.86
- Admin: Attacks On Dataset, Model And Input. A Threat Model For AI Based Software (2024)Vimal Kumar, Juliette Mayo, Khadija Bahiss3.58
- Enhancing Malware Detection with Generative AI: Using Variational Autoencoders to Boost Machine Learning Classifiers' Performance (2026)Mohammad Alharbi et al.3.51
- Semantic Multi-Agent Intrusion Detection for IoT:Zero-Day and Adversarial Threats with Risk-Aware Reasoning (2026)Saeid Jamshidi3.51
- Side-Channel Attacks Bypass Protection in 3D Printers (2026)Eric Yocam et al.3.51
- Detecting Bot Detection: Prevalence, Techniques, and Implications for Web Measurement Research (2026)Ralf Gundelach et al.3.51
- Poisoning the Watchtower: Prompt Injection Attacks Against LLM-Augmented Security Operations Through Adversarial Log Content (2026)Rohan Pandey et al.3.45
- SEED: Semi-supervised Continual MalwarE Detection for Tackling ConcEpt Drift on a BuDget (2026)Suresh Kumar Amalapuram et al.3.45
- Building an Adversarial Malware Dataset by Family and Type: Generation, Evasion, and Poisoning Evaluation (2026)David Ko\v{s}\v{t}\'al et al.3.45
- A Systematic Survey Of Model Extraction Attacks And Defenses: State-of-the-art And Perspectives (2025)Kaixiang Zhao, Lincan Li, Kaize Ding, et al.3.44
- Towards Secure Mlops: Surveying Attacks, Mitigation Strategies, And Research Challenges (2025)Raj Patel, Himanshu Tripathi, Jasper Stone, et al.2.93
- Explainable AI For Enhancing IDS Against Advanced Persistent Kill Chain (2025)Bassam Noori Shaker, Bahaa Al-Musawi, Mohammed Falih Hassan2.93
- Rule-att&ck Mapper (RAM): Mapping SIEM Rules To Ttps Using Llms (2025)Prasanna N. Wudali, Moshe Kravchik, Ehud Malul, et al.2.93
- Improving Network Threat Detection By Knowledge Graph, Large Language Model, And Imbalanced Learning (2025)Lili Zhang, Quanyan Zhu, Herman Ray, et al.2.93
- When MCP Servers Attack: Taxonomy, Feasibility, And Mitigation (2025)Weibo Zhao, Jiahao Liu, Bonan Ruan, et al.2.93
- CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities (2025)Yuxuan Zhu et al.2.76
- Discerning Reliable Cyber Threat Indicators For Timely Cyber Threat Intelligence (2023)Dincy R Arikkat, Vinod P., Rafidha Rehiman K. A., et al.2.26