Online news can provide timely cyberthreat signals, but duplicative reporting, fragmented event descriptions, resource-constrained Indonesian language text, and uncalibrated model confidence limit its operational use. This study presents A Trigger-Aware, Event-Centric, and Uncertainty-Calibrated Neuro-Symbolic Framework for Actionable Cyber Threat Intelligence from Indonesian Online News (TRACE-CTI-ID), a proof-of-concept framework that integrates exact deduplication, event-centric clustering, trigger-aware semantic representation, neuro-symbolic fusion, ordinal risk estimation, conformal uncertainty, mitigation mapping, and an event-centric knowledge graph. The experiment used 711 Liputan6 records collected on March 14, 2025. Exact deduplication reduced the corpus to 79 unique headlines, which were automatically consolidated into 26 events. Splitting the separate events resulted in 30 training articles, 5 calibration articles, and 44 test articles with zero event leakage. The calibrated neuro-symbolic model achieved a micro-F1 of 0.283 and a macro-F1 of 0.441, outperforming the baseline TF-IDF of 0.074 and 0.013, respectively. However, ordinal severity prediction remained weak with an accuracy of 0.136, a macro-F1 of 0.138, and a mean absolute error of 2.023. Conformal coverage was also unstable, and the abstention mechanism did not direct uncertain articles to human review. These findings demonstrate the technical feasibility of the integrated pipeline while also demonstrating that silver labeled, title only, and single source data are insufficient for final operational validation. Therefore, the key contribution is a transparent, leak aware evaluation architecture and protocol that can be strengthened through full text collection from multiple sources and independent expert annotation.
Copyrights © 2026