ATT&CK BERT is a cybersecurity domain-specific language model based on
sentence-transformers.
ATT&CK BERT maps sentences representing attack actions to a semantically meaningful embedding vector.
Embedding vectors of sentences with similar meanings have a high cosine similarity.
Using this model becomes easy when you have
sentence-transformers installed:
1from sentence_transformers import SentenceTransformer
2sentences = ["Attacker takes a screenshot", "Attacker captures the screen"]
3
4model = SentenceTransformer('basel/ATTACK-BERT')
5embeddings = model.encode(sentences)
6
7from sklearn.metrics.pairwise import cosine_similarity
8print(cosine_similarity([embeddings[0]], [embeddings[1]]))
To use ATT&CK BERT to map text to ATT&CK techniques Check our tool SMET:
https://github.com/basel-a/SMET