ANALYSIS OF THREAT INTELLIGENCE SYSTEMS

Bulletin of Shakarim University Technical Sciences, 2024

Полный текст Открытый доступ: Gold Метаданные (CSL-JSON)
DOI 10.53360/2788-7995-2024-4(16)-7
Достоверность данных 70 средняя
Как считается эта оценка

Складывается из проверяемых признаков самой записи: есть ли у статьи DOI, сколько независимых источников подтвердили её данные, заполнены ли обязательные поля и насколько свежо последнее подтверждение. Снижают оценку расхождения между источниками и отсутствие идентификатора. Значение от 80 означает, что запись опубликована без дополнительной проверки; от 60 до 79 — что она опубликована с пониженной достоверностью и ручная проверка желательна. Запись, выверенную редактором вручную, пересчёт не опускает ниже 90. Это оценка наших данных о статье, а не оценка самой статьи.

Аннотация

Threat Intelligence (TI) is information about current or emerging threats to information security that is used to enhance the protection of organizations. TI systems collect and analyze data from various sources, including open sources, closed sources, as well as data obtained from partners and clients. Analysis of TI systems is the process of evaluating the effectiveness of these systems in data collection and analysis, as well as in providing useful information for decision-making in the field of information security. In the modern digital world, where information security threats are becoming increasingly complex and sophisticated, the analysis of Threat Intelligence (TI) systems is becoming crucial for ensuring the security of information resources. Threat Intelligence is the process of collecting, analyzing, and interpreting data on information security threats aimed at identifying threats to information security. In this context, the analysis of TI systems serves as an important tool for effectively understanding threats and taking measures to prevent them. This article is dedicated to examining the features, advantages, and disadvantages of Threat Intelligence system analysis. For example, TI analysis can be used to evaluate the effectiveness of an intrusion detection system. (IDS). Analysis can identify which types of attacks an IDS can detect and which it cannot. Based on the analysis results, a decision can be made regarding the need to upgrade the IDS system or to add additional protective measures.