University of Twente Student Theses

Login

Unravelling the Information Asymmetry in Threat Intelligence

Safavi-Zadeh, Daniel (2024) Unravelling the Information Asymmetry in Threat Intelligence.

[img] PDF
5MB
Abstract:In the digital era, the cyber threat landscape has evolved significantly, posing a major concern for stakeholders such as governmental agencies, law enforcement, and companies. The understanding of the prevalence, spread, and trends of these cyber-attacks is of paramount importance. However, the primary source of insights into cybercrime numbers often stems from private entities. This leads to potential information asymmetry, with the public sector relying on data provided by private companies to comprehend current trends and threats. Furthermore, the frequent referencing of each other’s threat reports by private entities complicates the assessment of the original information source. This research addresses the information imbalance in cyber threat intelligence by experimenting with the collection and analysis of threat data from various government reports. The study poses two research questions: (1) To what extent can the extraction of sources from Cyber Threat Intelligence (CTI) reports be automated? (2) How can the methodologies used in Research Question 1 (RQ1) be applied to identify the organizations that significantly contribute to providing threat references from Cyber Intelligence Data resources, such as threat reports or blog posts, and to determine if there are indications of an oligopoly? The study offers valuable insights into the fields of Cyber Threat Intelligence, reference extraction methodologies, and the understanding of information asymmetry. The identified patterns and observations provide a foundation for future research, guiding the refinement of CTI threat reference extraction practices and fostering a more comprehensive understanding of the cyber threat landscape. The study’s findings reveal the most influential sources of threat intelligence, including Mitre Corporation, CISA, and ENISA, potentially indicating an oligopoly in the industry which still has to be investigated.
Item Type:Essay (Bachelor)
Faculty:EEMCS: Electrical Engineering, Mathematics and Computer Science
Subject:54 computer science
Programme:Business & IT BSc (56066)
Link to this item:https://purl.utwente.nl/essays/98244
Export this item as:BibTeX
EndNote
HTML Citation
Reference Manager

 

Repository Staff Only: item control page