DeltaTI: Threat Intelligence Aggregation Platform
Presented at IEEE 3SCEA 2026 and published in IEEE Xplore; developed from an E-JUST graduation project. DOI: 10.1109/3SCEA68071.2026.11602789
- Aggregates 18+ open-source threat intelligence feeds and normalizes them into STIX/TAXII 2.1 for SOC workflows.
- Deterministic trust-scoring engine (recency, cross-source corroboration, source reliability) that ranks indicators and serves them to firewalls, IDS, and other tooling through an API.
- Containerized for on-premises deployment with Docker Compose, Redis caching, and Elastic SIEM integration; includes a LoRA-fine-tuned SecureBERT 2.0 classifier (macro-F1 of 0.99).
