BIBLIOS

   Sistema de Gestão de Referências Bibliográficas de Ciências

Modo Visitante (Login)
Need help?


Voltar

Detalhes Referência

Tipo
Artigos em Conferência

Tipo de Documento
Artigo Completo

Título
PURE: Generating Quality Threat Intelligence by Clustering and Correlating OSINT

Participantes na publicação
Rui Azevedo (Author)
Iberia Medeiros (Author)
Dep. Informática
 LASIGE
 Alysson Bessani (Author)
Dep. Informática
 LASIGE
Resumo
Cybersecurity has become a top priority for most organizations. To more aptly protect themselves, organizations are moving from reactive to proactive defensive measures. They are investing in cyber threat intelligence (CTI) to provide them forewarning about the risks they face, as well as to accelerate their response times in the detection of attacks. A mean to obtain CTI is the collection of open source intelligence (OSINT) information via threat intelligence platforms and their representation as indicators of compromise (IoC). However, most of these platforms are providing threat information with little to no processing, presenting thus limitations on generating useful quality data. This work presents an approach for improving OSINT processing to generate threat intelligence of quality in the form of enriched IoCs. This improved intelligence is obtained by correlating and combining IoCs coming from different OSINT feeds that contain information about the same threat, aggregating them into clusters, and then representing the threat information contained within those clusters in a single enriched IoC. The approach was implemented in the PURE platform and evaluated with 34 OSINT feeds, which allowed the creation of enriched IoCs that permitted the identification of attacks not previously possible by analyzing the IoCs individually.

Data de Publicação
2019-08

Instituição
FACULDADE DE CIÊNCIAS DA UNIVERSIDADE DE LISBOA

Evento
2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE)

Identificadores da Publicação
ISBN - 9781728127774

Local
Rotorua, New Zealand

Editora
IEEE

Identificadores do Documento
URL - http://dx.doi.org/10.1109/trustcom/bigdatase.2019.00071
DOI - https://doi.org/10.1109/trustcom/bigdatase.2019.00071

Identificadores de Qualidade
CORE A (2018) -
Google Metrics (2019) - 24


Exportar referência

APA
Rui Azevedo, Iberia Medeiros, Alysson Bessani, (2019). PURE: Generating Quality Threat Intelligence by Clustering and Correlating OSINT. 2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE), -

IEEE
Rui Azevedo, Iberia Medeiros, Alysson Bessani, "PURE: Generating Quality Threat Intelligence by Clustering and Correlating OSINT" in 2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE), Rotorua, New Zealand, 2019, pp. -, doi: 10.1109/trustcom/bigdatase.2019.00071

BIBTEX
@InProceedings{43379, author = {Rui Azevedo and Iberia Medeiros and Alysson Bessani}, title = {PURE: Generating Quality Threat Intelligence by Clustering and Correlating OSINT}, booktitle = {2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE)}, year = 2019, pages = {-}, address = {Rotorua, New Zealand}, publisher = {IEEE} }