The Panacea Threat Intelligence and Active Defense Platform

TL;DR

Panacea is an innovative cybersecurity platform that leverages NLP techniques to detect social engineering attacks, engage attackers with bots, and improve active defense through message analysis and dialogue generation.

Contribution

It introduces a novel NLP-based system for cyber defense that actively engages attackers and processes modern message formats with a flexible plug-in architecture.

Findings

Uses NLP to detect social engineering attacks

Engages attackers with bots to gather evidence

Processes modern message formats efficiently

Abstract

We describe Panacea, a system that supports natural language processing (NLP) components for active defenses against social engineering attacks. We deploy a pipeline of human language technology, including Ask and Framing Detection, Named Entity Recognition, Dialogue Engineering, and Stylometry. Panacea processes modern message formats through a plug-in architecture to accommodate innovative approaches for message analysis, knowledge representation and dialogue generation. The novelty of the Panacea system is that uses NLP for cyber defense and engages the attacker using bots to elicit evidence to attribute to the attacker and to waste the attacker's time and resources.