SNS Message Classification via Segmented Item Setting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing social networking services (SNS) face challenges in comprehensively collecting and classifying cyber threat intelligence information due to the need for users to describe messages using a predetermined data structure, making it difficult for members within a community to uniformly classify and manage such information.
Innovation Solution
A message exchanging device and method that allows users to set common classification items within a community, enabling messages to be classified and managed using these items, with features like item setting, message exchange, and item-specific message management, facilitating uniform classification and comprehensive collection of messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If users post messages using a predetermined data structure (e.g., STIX language), then cyber threat intelligence information can be collected, but it becomes difficult for community members to uniformly classify and manage the information
Solution Approach 1:
The patent segments the classification process into two parts: (1) automated syntactic analysis that extracts structured information from posted messages, and (2) manual classification by community members using predefined categories. This segmentation allows both automated information collection and human-friendly classification, resolving the contradiction between comprehensive data collection and ease of uniform classification.
Solution Approach 2:
The patent introduces an intermediary classification system with predefined categories (e.g., attacker types, attack methods, detection indicators) that acts as a mediator between the raw posted messages and the final organized knowledge base. This intermediary structure enables community members to uniformly classify information without needing to understand complex data structures like STIX, while still achieving comprehensive collection of cyber threat intelligence.
2Adaptability or versatility
If arbitrary keyword assignment (hashtag) is used for message classification, then messages can be searched and collected based on keywords, but it is difficult to define a unified keyword assignment method among multiple users
Solution Approach 1:
The patent changes the parameter of classification from user-defined arbitrary keywords (hashtags) to system-defined standardized categories with fixed meanings. This parameter change maintains the flexibility of searching and collecting messages while ensuring unified and consistent classification across all community members, as the categories are predefined and stable.
3Quantity of substance
If all messages are collected from SNS without structured classification, then large amounts of data are accumulated, but it is difficult to comprehensively classify all related items
Solution Approach 1:
The patent segments the large volume of collected messages into organized categories based on classification items (e.g., attacker types, attack methods, detection indicators, observed phenomena, incidents, countermeasures, attack targets). This segmentation allows the system to handle large quantities of messages while maintaining a manageable and systematic classification structure through automated analysis and predefined categories.
Data Source
AI summary
Provided are a message exchanging device and a message exchanging method capable of comprehensively collecting and classifying related items for all messages (content) in a community employing a social networking service (SNS). This message exchanging device for exchanging messages between members belonging to an arbitrarily defined group, using an SNS group function, is provided with: a storage unit for storing the messages exchanged between the members; an item setting unit for setting items for classifying the messages exchanged between the members belonging to the group; a message exchanging unit for exchanging the message separately for each item set by the item setting unit; and an item-specific message management unit for storing, separately for each item, the messages exchanged by the message exchanging unit in the storage unit.