Welcome to Scribd. Sign in or start your free trial to enjoy unlimited e-books, audiobooks & documents.Find out more
Download
Standard view
Full view
of .
Look up keyword
Like this
1Activity
0 of .
Results for:
No results containing your search query
P. 1
Integrating Web Intelligence Into Cyber Ops

Integrating Web Intelligence Into Cyber Ops

Ratings:
(0)
|Views: 1|Likes:
Published by Bob Gourley
This paper, which was sponsored by Recorded Future, examines this new category of Web Intelligence in a cyber defense context and provides information you can use in deciding the best ways to integrate Web Intelligence into enterprise cyber security operations.
This paper, which was sponsored by Recorded Future, examines this new category of Web Intelligence in a cyber defense context and provides information you can use in deciding the best ways to integrate Web Intelligence into enterprise cyber security operations.

More info:

Categories:Topics
Published by: Bob Gourley on Oct 22, 2013
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

05/14/2015

pdf

text

original

 
 
WhitePaper:LeveragingWebIntelligencetoEnhanceCyberSecurity
October2013
Inside:
NewcontextonWebIntelligence
Theneedforexternaldatainenterprisecontext
Makingbetteruseofwebintelligence
 
2
CTOlabs.com
 
Web Intelligence: A new category of actionable information
Web Intelligence is the parsing of millions of sources of Internet connected information in a waythat is useful to decision-making. It enables the harnessing of the global information grid andadds predictive power to functions such as strategy development, investment decisions and riskassessment/mitigation.This paper, sponsored by Recorded Future, examines this new category of Web Intelligence ina cyber defense context and provides information you can use in deciding the best ways tointegrate Web Intelligence into enterprise cyber security operations.
Our Insights into Web Intelligence:
The lead author of this paper led some of the first contributions of all source intelligence to cyber defense in the US Department of Defense and has been an active contributor to the cyber security and technology communities for two decades. For the last four years, the researchteam at CTOlabs.com has been contributing to studies and analysis and community events oncyber security operations, security technology and analytical tools. We interact with thecommunity through our blog and newsletters, including daily and weekly newsletters trackingcyber security and analytical tools.We leveraged our background in cyber intelligence and technology in producing thisassessment. We also checked our assumptions by asking for inputs from a range of enterpriseCISOs in the financial, manufacturing and retail sectors.
Web Intelligence and Cyber Security
Web Intelligence can significantly enhance enterprise cyber security operations. In a cyber context, web intelligence is being used to track vulnerabilities being discussed in hacker channels and exploited in successful attacks. Web intelligence also portrays information on thenature of malicious code and its mitigation strategies. Further, it is a means of tracking thetechnologies and tactics being employed by attackers, as well as the proven best practicesbeing applied to mitigate threats. It is in this last category of information that web intelligence ismaking its most unique contributions to cyber defense. Web intelligence is bringing new insightsinto the identity, motivation and intentions of threat actors, and it is doing so in ways that cancontribute to predictions of future behavior.Since Web Intelligence can provide enhanced information on threat intentions it enables ashifting of cyber defense to more proactive strategies. For example, information on pastbehaviors of cyber actors associated with real-world events can lead to predictions on futurebehaviors associated with coming events. This can lead to predictions of when to expect DDoS
 
3
WebIntelligenceforCyberSecurityOperations
 
attacks or when to expect more focused phishing attacks. In some cases it can also lead topredictions on the nature of the deceptive content that can be used in phishing attacks. Withmore precise insights, action can be taken to mitigate threats before they strike.Web intelligence also makes critically important contributions to the issue of assessing who isattacking and why. More refined assessments on this critical element can contribute toassessments of an adversary’s next step. Web intelligence can help defenders assess whether an attack is hactivism or something more sinister. It can also help in assessments of whether or not others will be targets – in particular business partners such as suppliers or customers - andif a more collective defense will need to be mounted.
Web Intelligence from Recorded Future
Recorded Future is a web intelligence company. Their mission is to harness open web sourcesthat publish open information on the web for analysis. They create insight in support of government missions and business decisions.Recorded Future and their Temporal Analytics™ Engine organize web information for analysisto yield new insights. Recorded Future specializes in analyzing human writing to detect events,actions and descriptions of actions and then place this information in a time-based (temporal)context. These timelines and topics can be aggregated and correlated to ensure information onthe same event can be viewed by multiple angles. This enables analysis in the light of allrelated information, including historical information.Recorded Future ingests, in real time, over 300,000 real time sources, performing over 50extractions per second and building a deep history at the same time. They have alreadyamassed a fact based of over 5 billion facts in multiple languages including English, Chinese,Russian, Arabic, Farsi, Spanish, and French.

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->