PaloAltoNetworks_ActionableThreatIntelligence_Alibaba_AdrianCulley_3.pdf
免费下载
Actionable Threat Intelligence:
The Intelligence Life Cycle
(plus some thoughts on Wannacry / Petya)
Adrian Culley
Consulting Engineer
Threat Intelligence and Malware
Palo Alto Networks
Actionable Threat Intelligence
• Intelligence that not only can, but also shoul d , be acted upon.
The Intelligence Life Cycle Concepts:
– Ignorance - We know nothing
– Data - We know something
–
– Information - We know something about what we know
– Knowledge - What we know is useful
– Intelligence - What we know is actionable
– Wisdom - What we know is actionable in the future
("Joint Publication 2-0, Joint Intelligence" (PDF). Defense Technical Information Center (DTIC). Department of Defense. 22 June 2007.)
CONTEXT CORROBORATION ANALYSIS
of 13
免费下载
【版权声明】本文为墨天轮用户原创内容，转载时必须标注文档的来源（墨天轮），文档链接，文档作者等基本信息，否则作者和墨天轮有权追究责任。如果您发现墨天轮中有涉嫌抄袭或者侵权的内容，欢迎发送邮件至：contact@modb.pro进行举报，并提供相关证据，一经查实，墨天轮将立刻删除相关内容。
下载排行榜
评论