Introduction to Cyber Threat Intelligence: What Can It Do for You?

Security organizations are stuck between a rock and a hard place. They’re trying to reduce the time it takes to detect and respond to security threats, even as they suffer from a skills and resource shortage. Can threat intelligence help? A survey of security decision makers found that, on average, threat intelligence programs saved organizations $8.8 million in the previous 12 months. Let’s look at what threat intelligence is and how companies are benefiting from it.What is Threat Intelligence?

Threat intelligence is information that informs enterprise defenders of adversarial elements to stop them. It ranges from collecting intelligence on the dark web to identifying adversarial signatures of tools and networks. And, it starts with data.

“Data is collected from sources where threat actors congregate and operate, such as deep and dark web forums, chat platforms, and open web sources, such as paste sites,” explains Josh Lefkowitz of Flashpoint.

But data alone isn’t intelligence. “Threat intelligence is information that is relevant to the organization, has business value, and is actionable. To do this properly, organizations need the right collection methods, as well as a human team to vet and remove false positives,” says Jeremy Hass of LookingGlass.

Lefkowitz clarifies further: “Threat intelligence brings additional context to data about threats and adversaries targeting organizations.”

The Benefits of Threat Intelligence

Security organizations—particularly those that are struggling with a skills shortage—can benefit from threat intelligence. Threat intelligence can give teams the ability to d ..