A team of scientists at the Department of Energy’s Pacific Northwest National Laboratory, Purdue University, Carnegie Mellon University and Boise State University have knitted together three large databases of information about computer vulnerabilities, weaknesses and likely attack patterns.
The AI-based model automatically links vulnerabilities to specific lines of attack that adversaries could use to compromise computer systems. The work should help defenders spot and prevent attacks more often and more quickly. The work is open source with a portion now available on GitHub: https://github.com/Cybersecurity-Tools/V2W-BERT. The team will release the rest of the code soon.
