Fig. 1
From: Cyberattack event and arguments extraction based on feature interaction and few-shot learning
The illustration demonstrates the entity and relation annotation task in the context of CTI. Specifically, the phrase “ransomed 1 bitcoin for each infected computer” is annotated as the Attack. Ransom event type. Other phrases such as “The hacker”, “the intranet”, “SONY in Japan”, “stole the PII of employees”, and “Saturday” are also annotated with their corresponding event argument types (e.g., “Person”, “Device”, “GPE”, “Capabilities”, “Time”). Additionally, there are annotations for relations between event types and event arguments, such as “Attacker-Person”, “Victim-Arg”, “Place-Arg”, “Attack-Pattern-Arg”, and “Time-Arg”.
