Clustering of Threat Information to Mitigate Information Overload for Computer Emergency Response Teams. (arXiv:2210.14067v1 [cs.CR])

The constantly increasing number of threats and the existing diversity of
information sources pose challenges for Computer Emergency Response Teams
(CERTs). In order to respond to new threats, CERTs need to gather information
in a timely and comprehensive manner. However, the volume of information and
sources can lead to information overload. This paper answers the question of
how to reduce information overload for CERTs with the help of clustering
methods. Conditions for such a framework were established and subsequently
tested. …

computer emergency information overload response teams threat