Analyzing Cyber-Physical Systems from the Perspective of Artificial Intelligence

网络心理学中的人工智能：通过使用人工智能分析受害者、攻击者和防御者的心理来增强网络安全的系统文献综述

AI in Cyberpsychology: A systematic literature review of Cybersecurity enhancement by using AI for analyzing psychology of Victims, Attackers, and Defenders

该文献综述通过PRISMA方法分析34项AI在网络心理学中应用的研究，呈现网络安全应用、AI方法及心理概念的分类，涵盖异常检测等四个领域，明确常用心理概念、量化数据集，还指出研究差距与趋势。

超越RAG的网络威胁情报：基于图和代理检索的系统评估

Beyond RAG for Cyber Threat Intelligence: A Systematic Evaluation of Graph-Based and Agentic Retrieval

本文系统评估了四种RAG架构在CTI分析中的表现，发现图检索在结构化查询中表现更优，混合图文方法在多跳查询中提升答案质量达35%。

Challenges and Opportunities of Blockchain for Cyber Threat Intelligence Sharing

The emergence of the Internet of Things (IoT) technology has caused a powerful transition in the cyber threat landscape. As a result, organisations have had to find new ways to better manage the risks associated with their infrastructure. In response, a significant amount of research has focused on developing efficient Cyber Threat Intelligence (CTI) sharing platforms. However, most existing solutions are highly centralised and do not provide a way to exchange information in a distributed way. In this chapter, we subsequently seek to evaluate how blockchain technology can be used to address a …

A Trusted, Verifiable and Differential Cyber Threat Intelligence Sharing Framework using Blockchain

Cyber Threat Intelligence (CTI) is the knowledge of cyber and physical threats that help mitigate potential cyber attacks. The rapid evolution of the current threat landscape has seen many organisations share CTI to strengthen their security posture for mutual benefit. However, in many cases, CTI data contains attributes (e.g., software versions) that have the potential to leak sensitive information or cause reputational damage to the sharing organisation. While current approaches allow restricting CTI sharing to trusted organisations, they lack solutions where the shared data can be verified …

CAAI -- A Cognitive Architecture to Introduce Artificial Intelligence in Cyber-Physical Production Systems

This paper introduces CAAI, a novel cognitive architecture for artificial intelligence in cyber-physical production systems. The goal of the architecture is to reduce the implementation effort for the usage of artificial intelligence algorithms. The core of the CAAI is a cognitive module that processes declarative goals of the user, selects suitable models and algorithms, and creates a configuration for the execution of a processing pipeline on a big data platform. Constant observation and evaluation against performance criteria assess the performance of pipelines for many and varying use case…

A Blockchain-Enabled Incentivised Framework for Cyber Threat Intelligence Sharing in ICS

In recent years Industrial Control Systems (ICS) have been targeted increasingly by sophisticated cyberattacks. Improving ICS security has drawn significant attention in the literature that emphasises the importance of Cyber Threat Intelligence (CTI) sharing in accelerating detection, mitigation, and prevention of cyberattacks. However, organisations are reluctant to exchange CTI due to fear of exposure, reputational damage, and lack of incentives. Furthermore, there has been limited discussion about the factors influencing participation in sharing CTI about ICS. The existing CTI-sharing platf…