Publications

2026

Strengthening cloud applications: A deep dive into kill chain identification, scoring, and automatic penetration testing

Working paper

2026

Knowing your weaknesses is your greatest strength: Mapping CVE to CWE by leveraging CWE hierarchy and LLMs

ACM ASIA Conference on Computer and Communications Security

2026

Making the most of fragmented supervision for sentence-to-TTP mapping

Preprint

2025

ThreatCompass: A tool for identifying and mapping security issues to TTPs

Workshop on Large AI Systems and Models with Privacy and Security Analysis

2025

Beyond CWEs: Mapping weaknesses in unstructured threat intelligence text

International Conference on Cryptology and Network Security

2025

What matters most in vulnerabilities? Key term extraction for CVE-to-CWE mapping with LLMs

International Conference on Cryptology and Network Security

2024

Text2Weak: mapping CVEs to CWEs using description embeddings analysis

Workshop on Artificial Intelligence-Enabled Cybersecurity Analytics (AI4Cyber)

2024

Comprehensive threat analysis and systematic mapping of CVEs to MITRE framework

International Conference on Natural Language Processing and Artificial Intelligence for Cyber Security

2023

Are we reasoning about cloud application vulnerabilities in the right way?

IEEE European Symposium on Security and Privacy