{"id":4687,"date":"2018-06-29T14:30:00","date_gmt":"2018-06-29T14:30:00","guid":{"rendered":"https:\/\/www.darkreading.com\/threat-intelligence\/why-sharing-intelligence-makes-everyone-safer\/a\/d-id\/1332127"},"modified":"2018-06-29T14:30:00","modified_gmt":"2018-06-29T14:30:00","slug":"why-sharing-intelligence-makes-everyone-safer","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/why-sharing-intelligence-makes-everyone-safer\/","title":{"rendered":"Why Sharing Intelligence Makes Everyone Safer"},"content":{"rendered":"
\n<\/header>\n

Security teams must expand strategies to go beyond simply identifying details tied to a specific threat to include context and information about attack methodologies.<\/span> <\/p>\n

Cybersecurity is sometimes viewed as being inherently reactive. But given the security issues we face today, security professionals must push beyond merely blocking an attack before a network breach. Cybersecurity teams must also have the ability to disrupt<\/em>\u00a0an attack from achieving its goal. This might sound similar to blocking<\/em> an attack, but there’s more to it.<\/p>\n

This foresight can be acquired through knowledge of the kill chain<\/a>, which refers to\u00a0models that map the stages of attacks from initial system probing and network penetration to the final exfiltration of valuable data. Some people in our industry describe this process as “cyber threat intelligence.”<\/p>\n

The Strategy Behind Cyber Threat Intelligence
<\/strong>Such a strategy goes beyond signatures or details tied to a specific threat. It could also include context and information about attack methodologies, tools utilized to obscure an infiltration, methods that hide an attack within network traffic, and tactics that evade detection.<\/p>\n

It is also important to understand the different kinds of data under threat, the malware in circulation, and, more importantly, how an attack communicates with its controller. These elements of foresight enable the disruption of an attack at any of the points mentioned above.<\/p>\n

But threat intelligence is also about being qualitative, at least to the degree that it can be leveraged to respond to an attack, whether that means a forensic analysis for full recovery or the attribution and prosecution of the people responsible for the attack.<\/p>\n

Sources of Cyber Threat Intelligence
<\/strong>Information sharing is a critical aspect of any security strategy. It’s critical to compare the network or device you are trying to protect against a set of currently active threats; this allows you to assign the right resources and countermeasures against different attacks.<\/p>\n

To leverage intelligence, start by accessing a variety of threat intelligence sources, some of which might include:<\/p>\n