Managing threat information and intelligence
The last thing that any organization wants is to make the headlines following a security breach. The damage to their reputation can be enormous, as can the financial costs. Unfortunately, it’s not a case of if it will happen, but when it will happen.
Do you know the difference between information and intelligence? While this may seem nothing more than semantics in most situations, the difference is extremely significant when it comes to cyber security. Simply described, information is data or facts that have been collected and intelligence is actionable assessment of those facts.
The distinction can be best illustrated as follows:
An exploit for a zero-day Java vulnerability is publicly released on a security mailing list. Shortly thereafter, malware is identified using the vulnerability. Security vendors notify clients of...