From Threat Intelligence to Firewall Rules: Semantic Relations in Hybrid AI Agent and Expert System Architectures

Researchers propose a hybrid AI agent and expert system architecture that uses semantic relations to automatically convert cyber threat intelligence reports into firewall rules. The system leverages hypernym-hyponym textual relations and generates CLIPS code for expert systems to create security controls that block malicious network traffic.