Research Article

EX-Action: Automatically Extracting Threat Actions from Cyber Threat Intelligence Report Based on Multimodal Learning

Table 2

The description of five type features.

TypeFeatureDescription

SimilarityThe similarity between the action and description sentences.
ProbabilityThe probability and frequency of the VO pair.
Mutual informationThe MI contains two values, which, respectively, are the VO pair-MI and the SVO triples-MI .
Semantic dependenceThe semantic dependency of each word in action.
DistanceIt contains two values, which, respectively, express the distance between the verb and the subject and the distance between the verb and the object .