Integrating knowledge graphs and cypher queries for enhanced Cyber threat intelligence in Nigerian cyberspace

Effective Cyber Threat Intelligence (CTI) requires a localized and interpretable system that is capable of addressing region-specific threats. In this study, we present an integrated approach that combines both Knowledge Graph construction with Cyber-based query answering to enhance cybersecurity analysis within Nigerian cyberspace. Built in Neo4j, the system represents key CTI entities such as Actor , Technique , and Organization , the proposed approach shows feasibility and transparent threat analysis by a scheme guided methodology. A use case involving SilverTerrier , a major threat group in Nigerian cyberspace generated a graph which comprises 287 nodes and 364 relationships, demonstrating the approach’s ability to organize heterogeneous threat data into a more coherent and semantically consistent structure. The results demonstrate the feasibility of the proposed integration as a domain-specific approach that supports structured and efficient query execution, improved situational awareness, and proactive defense within the cyber environment or ecosystem.