# name
Classification of Honeypot Data Using the MITRE Framework

# metadata.dc.description[].value
Treballs finals del Màster de Fonaments de Ciència de Dades, Facultat de matemàtiques, Universitat de Barcelona. Any: 2025. Tutor: Eloi Puertas i Prats

# metadata.dc.description.abstract[].value
Proactive cybersecurity measures are essential for effective risk mitigation in increasingly complex and evolving digital environments. Achieving this requires not only the collection of relevant data but also its accurate interpretation and the development of specialized analytical frameworks. This project focuses on addressing
the challenge of interpreting cyber threat data by classifying honeypot data, provided by the Global Cyber Alliance (GCA), according to the MITRE ATT&CK Matrix—a widely recognized framework for understanding adversarial behavior. In an era dominated by large language models (LLMs), we investigate an alternative approach based on smaller, specialized models. Specifically, we design a custom architecture of lightweight models and train them for the task, evaluating their performance across various configurations. Our findings demonstrate that these models can, in certain scenarios, outperform larger LLMs in both accuracy and efficiency, offering a more sustainable and cost-effective solution for targeted cybersecurity applications.

# metadata.dc.source[].value
Màster Oficial - Fonaments de la Ciència de Dades

# metadata.dc.subject.classification[].value
Tractament del llenguatge natural (Informàtica)

# metadata.dc.subject.classification[].value
Natural language processing (Computer science)

# metadata.dc.subject.other[].value
Natural language processing (Computer science)

# metadata.dc.title[].value
Classification of Honeypot Data Using the MITRE Framework