Background

The term "threat intelligence" emerged rapidly onto the information security scene over the last several years, and many security vendors now offer threat intelligence services to customers. Since there is no standard industry definition of threat intelligence, not everyone defines it the same way. As a result, the term threat intelligence is so broadly used in the security industry that the true definition of "intelligence" is sometimes lost. Some threat intelligence services being offered in the market today are not offering true intelligence at all - they are simply offering access to minimally analyzed (or even raw) data. As noted intelligence expert Will Agrell famously said, "When everything is intelligence, nothing is intelligence."

When intelligence is understood and utilized properly, enterprises can realize great value. Actionable threat intelligence is the result of a rigorous process, with defined goals and targets in mind.

Rob Kraus, Director of the Solutionary Security Engineering Research Team (SERT) will discuss the definition of threat intelligence, the value of actionable threat intelligence and what organizations should expect from threat intelligence services. This webinar will:

• Define what threat intelligence is and its importance to information security;
• Discuss the growth of threat intelligence services;
• Document the steps in the intelligence process;
• Provide a foundation for those considering threat intelligence services;
• Show how enterprises can improve security through enhanced situational awareness.