Trident: Dual-stream APT attribution over heterogeneous threat knowledge graphs

This academic paper presents Trident, a system for identifying which threat actors (APTs, or advanced persistent threats, which are sophisticated hacking groups) are responsible for cyberattacks by analyzing data from multiple sources using knowledge graphs (databases that store relationships between pieces of information). The research addresses the challenge of attribution when threat intelligence comes from different types of sources and formats.