Venn Diagram of the Day – Commercial vs. Home Grown Threat Intel

Useless IOCsFollowing up on our recent article regarding the best way to create relevant and actionable threat intelligence, I wanted to share this Venn diagram from my “Creating REAL Threat Intelligence” series of talks. Basically, you cannot buy relevant and actionable threat intelligence as it pertains to your organization.

There may be a slight overlap as the Venn diagram shows below but the vast majority of third party purchased “intel” either goes unused or results in scores of false-positives, since assigning real value to indicators is a difficult problem, that your analysts have to deal with in their precious time. Maybe the next big wave of cyber technology, machine learning, will save us.

Threat Intel Venn Diagram

#####

Today’s post pic is from @JohnLaTwC. See ya!

3 comments for “Venn Diagram of the Day – Commercial vs. Home Grown Threat Intel

  1. January 21, 2016 at 1:21 am

    BLOGGED: Venn Diagram of the Day – Commercial vs. Home Grown Threat Intel https://t.co/fUtgjLJZQJ

  2. January 21, 2016 at 2:10 pm

    Some threat intel bloggage… Venn diagram of the day… https://t.co/fUtgjM1Bfj

  3. January 23, 2016 at 7:55 am

    Some threat intel bloggage… Venn diagram of the day… https://t.co/pr1KZGwu8H #infosec

Leave a Reply

Your email address will not be published. Required fields are marked *