Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGolemDE: Leben als IT-Freiberufler – zwei Perspektiven(24.09.2026 um 07:03 Uhr)
Sichere ProgrammierungOpenChamber 2.0: Skills ändern, Agent läuft weiter(24.09.2026 um 09:04 Uhr)
Sichere ProgrammierungBuilding Enterprise dApps with Smart Contracts and REST APIs(21.09.2026 um 11:34 Uhr)
Sichere ProgrammierungJavaScript Array Methods: 7 Essential Methods Every Developer Needs(24.09.2026 um 08:51 Uhr)
Sichere ProgrammierungCross-Chain Bridge Risk Assessment: Gauntlet(24.09.2026 um 08:53 Uhr)
Sichere ProgrammierungWe spent thirteen weeks about to buy a bigger database(24.09.2026 um 08:54 Uhr)
Sichere ProgrammierungHow to Choose a CDN for Asia in 2026: 7 Providers Compared(24.09.2026 um 08:54 Uhr)
Sichere ProgrammierungMy deploy said Success. It went to a URL nobody visits.(24.09.2026 um 09:00 Uhr)
YouTube Security VideosGolemDE: Leben als IT-Freiberufler – zwei Perspektiven(24.09.2026 um 07:03 Uhr)
Sichere ProgrammierungOpenChamber 2.0: Skills ändern, Agent läuft weiter(24.09.2026 um 09:04 Uhr)
Sichere ProgrammierungBuilding Enterprise dApps with Smart Contracts and REST APIs(21.09.2026 um 11:34 Uhr)
Sichere ProgrammierungJavaScript Array Methods: 7 Essential Methods Every Developer Needs(24.09.2026 um 08:51 Uhr)
Sichere ProgrammierungCross-Chain Bridge Risk Assessment: Gauntlet(24.09.2026 um 08:53 Uhr)
Sichere ProgrammierungWe spent thirteen weeks about to buy a bigger database(24.09.2026 um 08:54 Uhr)
Sichere ProgrammierungHow to Choose a CDN for Asia in 2026: 7 Providers Compared(24.09.2026 um 08:54 Uhr)
Sichere ProgrammierungMy deploy said Success. It went to a URL nobody visits.(24.09.2026 um 09:00 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

The Shape of Knowledge

In earlier episode I said the relationships are not explicitly stored, then what is stored? how is it stored? Let's come up with some simplest strategies to explore how it might have been done. We need an example to start with, to make it…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

In earlier episode I said the relationships are not explicitly stored, then what is stored? how is it stored?



Let's come up with some simplest strategies to explore how it might have been done. We need an example to start with, to make it possible to visualise.



Let's suppose we have three words




Cat
Lion
Apple






If I ask which two are similar? It is easier for humans, we have an advantage of explicit knowledge.



Hmm. How about we number these words




Cat = 94
Lion = 24
Apple = 344






Still nothing.. Just numbers, the numbers still don't tell anything about similarity, does it?



We need something that means Cat and Lion similar or literally closer than Cat and Apple.



See similar can in fact mean distance geometrically.. and the distance starts representing some sort of meaning.



It just so happens that, after decades of trying symbolic rules, logic, expert systems, and hand-crafted knowledge graphs, researchers found that geometry was an unexpectedly powerful way to represent knowledge.



Let's start with simple exercise.



One million words. The computer understands only numbers. Design a representation that somehow captures meaning.



Let's try some arrangements for this data.



How about "Tag Cloud" where words are tagged with a meaningful tags, not exactly numerical grouped but grouped nonetheless. distance here is not numerical, yet it is able to express what words are closer.. does it?



Words can belong to more than one tag cloud making the visualization a tad difficult. Tag itself it a word, where does that belong? Hmm.. we have a recursive representation. Is it good or bad? For humans maybe difficult but not for machines. Stil is it okay from machine perspective?



Let's illustrate with simple example.




Animals
-------
Dog
Cat
Wolf
Lion

Pets
----
Dog
Cat
Mouse

Wild
----
Wolf
Mouse

Food
----
Apple
Rice






Cat and Dogs are Pets and also an animal



Idea seems to be working.. without explicit rules we have expressed meaning through shared membership.



Now ask the earlier question again. Is cat more similar to lion or an apple? It is easier to say lion now as they would share more and more tag clouds..



Now imagine each tag exerting small pull. In this world, a cat is being pulled towards Animals cloud, as well towards felines



Cat is pulled simultaneously by:




  • pets

  • felines

  • animals

  • four-legged

  • etc.



Likewise Lion is pulled by:




  • animals

  • felines

  • four-legged

  • wild



Now cloud is not a cloud but a vast landscape. Numerical values are not even primary cursors here, you just need to feel the distance by imagining the pull on the word.



Even though idea seems to be working, let's reassess the use of words as tag.



Our first cloud is Animals.




Animals
-------
Dog
Cat
Wolf
Lion






But but the word Animal itself belongs to another cloud




Living Things
-------------
Animals
Trees
Plants






But what is "Living Things", it belongs to another cloud




Biology
-------
Living Things
Cells
Virus ???






This can go on forever.



This is recursive semantics.



We humans, somehow, know when to stop going down this rabbit hole. Not so for computers unless it is rigidly implemented.



So let's forget word labels and imagine Cat, Dog, Lion, etc. being some point in a space. Somehow Cat and Lion land closer to each other than Cat and Apple. The proximity is expressed as distance between the points.



Loosening up criteria of the tag being a word and it being a number has lots of benefits. Numbers are numbers there is no hidden meanings that forces the semantic recursion.



Using numbers has one more obvious advantage.. now you don't need pre-create tags for categorization.



Now we are heading somewhere.. See proximus words form a cloud but what defines the measure of closeness. Do we even know the cloud boundary???



That's The Question and let's tackle that in next episode.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - The Shape of Knowledge
id: 0c9d1e0d-b0f7-415c-a99e-402ac6d43f36
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "The Shape of Knowledge" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich The Shape of Knowledge.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96772 | A security flaw has been discovered in Intelliants Subrion CMS up to 4.2…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick