{"id":883,"date":"2019-11-25T12:00:00","date_gmt":"2019-11-24T23:00:00","guid":{"rendered":"https:\/\/ostermanresearch.com\/?p=883"},"modified":"2021-01-20T11:09:41","modified_gmt":"2021-01-19T22:09:41","slug":"orwp_0316","status":"publish","type":"post","link":"https:\/\/ostermanresearch.com\/2019\/11\/25\/orwp_0316\/","title":{"rendered":"The Value of Threat Intelligence – White Paper"},"content":{"rendered":"\n

Published November 2019<\/strong><\/em><\/p>\n\n\n\n

Sponsored by Cofense<\/strong>, DomainTools<\/strong>, Proofpoint<\/strong> and Spamhaus Technology<\/strong>.<\/em><\/p>\n\n\n\n

Executive Summary<\/h4>\n\n\n\n

Cyber security is an ongoing battle between sophisticated and well-funded bad actors and those who must defend corporate networks against their attacks. The bad news is that the latter are typically not winning. A recent Osterman Research survey\u00a0found that while most organizations self-report that they are doing \u201cwell\u201d or \u201cvery well\u201d against ransomware, other types of malware infections, and thwarting account takeovers because of the significant emphasis placed on these threats, they are not doing well against just about every other type of threat. These include protecting data sought by attackers, preventing users from reaching malicious sites after they respond to a phishing message, eliminating business email compromise (BEC) attacks, eliminating phishing attempts before they reach end users, and preventing infections on mobile devices.<\/p>\n\n\n\n

This missing component for most organizations is the addition of robust and actionable threat intelligence to their existing security defenses, which can be segmented into four subcategories:<\/p>\n\n\n\n

  1. Strategic (non-technical information about an organization\u2019s threat landscape)<\/li>
  2. Tactical (details of threat actors\u2019 tactics, techniques and procedures)<\/li>
  3. Operational (actionable information about specific, incoming attacks)<\/li>
  4. Technical (technical threat indicators, e.g., malware hashes)<\/li><\/ol>\n\n\n\n

    The use of good threat intelligence can enable security analysts, threat researchers and others to gain the upper hand in dealing with cybercriminals by giving them the information they need to better understand current and past attacks, and it can give them the tools they need to predict and thwart future attacks. Moreover, good threat intelligence can bolster existing security defenses like SIEMs and firewalls and make them more effective against attacks. Threat intelligence plays a key role in proactive defense to ensure that all security programs are relevant to the fast-evolving threat landscape. This is particularly valuable in security awareness training to ensure users are familiar with known threats.<\/p>\n\n\n\n

    Request a Copy<\/h4>\n\n\n
    By downloading this white paper, you are opting into receiving marketing communications from Osterman Research and any of the sponsors of this white paper<\/div><\/div>