THE ANATOMY OF CYBER THREAT INTELLIGENCE (CTI) Noureen Njoroge

OVERVIEW • Define Cyber Threat Intelligence (CTI) • Define Cyber Intelligence (CI) • Understand the importance of CTI to an organization • Components of Threat • Sources of Cyber Threat Intelligence (CTI) • Categories of Cyber Threat Intelligence (CTI) • Benefits of Cyber Threat Intelligence (CTI) • Importance of real-time Cyber Threat Intelligence (CTI) Noureen Njoroge

DEFINITION Cyber Threat Intelligence (CTI) Is the analysis of information related to adversaries who have the intent, opportunity and capability to do harm. Noureen Njoroge

DEFINITION Cyber Intelligence (CI) Is the ability to gain knowledge about an enterprise and it’s existing conditions and capabilities. Noureen Njoroge

COMPONENTS OF A SUCCESSFUL THREAT INTELLIGENCE STRATEGY Three Important components 1. Good Data Sources 2. Good Policies, Procedures and chain of command. 3. Good Threat Intelligence Analysts Noureen Njoroge

CTI ON A CYBERSECURITY CHART

Noureen Njoroge

CTI IS INTELLIGENCE FOCUS Know the three components of threats: 1. Intent 2. Capability 3. Opportunity Noureen Njoroge

CYBER THREAT INTELLIGENCE (CTI) SOURCES Past Incidents • Commercial Feeds • Govt & Non- Profit sharing programs • Threat Intel Reports • Noureen Njoroge

CATEGORIES OF CYBER THREAT INTELLIGENCE Know the three categories of threats: 1. Tactical 2. Operational 3. Strategic Noureen Njoroge

CATEGORIES OF CYBER THREAT INTELLIGENCE

THE FIVE W ’ S & HOW Know threat and answer the 5 w ’s and How. WHEN WHERE WHY WHO WHAT HOW Noureen Njoroge

CASE FOR CYBER THREAT INTELLIGENCE (CTI) Before Attack During an Attack After Attack Noureen Njoroge

KEY BENEFITS OF CTI TO AN ORGANIZATION • It provides organizations a fighting chance to defeat ever-changing threats. • Provides a holistic view of the threat landscape and provide a posture to protect the organization from the multitude of threats they face ever day. Noureen Njoroge

INTEGRITY OF CTI REPORTS “All organizations that share threat information to customers or the public through any channel should employ guidelines that help them ensure accuracy in their reporting. Even if all the facts aren’t clear, organizations can still communicate what they know—and avoid guessing. Being right is better than being first”. https://www.cisco.com/c/dam/m/hu_hu/campaigns/security-hub/pdf/acr-2018.pdf Noureen Njoroge

BENEFITS OF REAL-TIME -- DYNAMIC CTI Provide visibility of threat landscape • Freshness of data • Collaboration • Threat context • Noureen Njoroge

KEY TAKEAWAYS Detection • Context • Advance Persistent Threat (APT) • Community Defense • Noureen Njoroge

FREE CTI RESOURCES https://www.mitre.org/capabilities/cybersecurity/cyber-threat-intelligence https://www.misp-project.org/feeds/ https://cymon.io https://www.us-cert.gov/ncas/alerts https://talosintelligence.com Noureen Njoroge

CONTACT Noureen Njoroge cybersecmentorship@gmail.com or nnjoroge@cisco.com Linkedin @ Noureen Njoroge Thank you for your time Noureen Njoroge

THE ANATOMY OF CYBER THREAT INTELLIGENCE (CTI) Noureen Njoroge - PowerPoint PPT Presentation

THE ANATOMY OF CYBER THREAT INTELLIGENCE (CTI) Noureen Njoroge OVERVIEW Define Cyber Threat Intelligence (CTI) Define Cyber Intelligence (CI) Understand the importance of CTI to an organization Components of Threat Sources of

Agenda What is Cyber Threat Intelligence (CTI) Sandbox Malware analysis Debugger

European Framework for Threat Intelligence Based Ethical Redteaming (TIBER- EU) & Cyber

The Cyber Threat: Securing Cyber Infrastructure Overview What are the FBIs Priorities?

Threat Intelligence Jeremy Batterman Global Leader Threat Intelligence GREM, EnCE, GCFA, MBA 3

The New Security Frontier: Threat Hunting, Augmented Intelligence, and Automated Response

Cyber Security: The Current Threat T/Detective Chief Inspector Paul Peters Regional Cyber Crime

Trustworthy Host Platforms For Accelerated Research And Education: Strategic Cyber Threat

Vajra Cyber Threat Mitigation Service (Vajra CTMS) A Military Grade Cyber Threat Mitigation

From 0 to Hero Actionable Threat Intelligence Raffaele Di Taranto Vito Lucatorto Our Journey

Data-Driven Threat Intelligence: Metrics on Indicator Dissemination and Sharing (#ddti)

MENA Information Security Conference 2017 On the Verge : Combating Cyber Threats leveraging Threat

THE EVOLVING CYBER THREAT LANDSCAPE : Ensuring the Integrity and Value of Information Sean

Cyber Catastrophe in the Movies: Realistic Threat or Hollywood Hokum? MODERATOR: PANELISTS:

CONFRONTING THE CYBER THREAT David J. Hickton SAC-PA Workshop Founding Director Pittsburgh,

Advanced Cyber Risk Management Threat Modeling & Cyber Wargaming April 23, 2018 The

Overview Introduction Legal framework Dynamics of the threat Nature of cyber

CTI New Coordinator Institute July 10, 2014 Rockdale Career Academy Dr. John D. Barge, State

CTI & CAREER TECH What do I do? I have special education students in my class, The Georgia

Carmen de Andacollo April 2012 Forward Looking Information Both these slides and the

PRESIDENTIAL CAMPAIGNS & IMMUTABLE INFRASTRUCTURE Or, how we learned to stop worrying and

The UNCAT and India: Perspectives on Ratification Webinar 24 June 2020 Organised by

support the development of quality of HEIs: the case of CTI Anne-Marie JOLLY, Teresa SANCHEZ

Final Outcomes APEC Conference ICT Energy Efficiency - Presentation Purpose: Information

Bulk Transmission Cost Allocation ~~~~~~~~ History & Policy 1 CWSAA 12CP