New Cyber Intelligence Research
For more than two years, the SEI Emerging Technology Center has conducted cyber intelligence research and development to empower government, industry, and academia to advance their cyber intelligence tradecraft and address systemic analytical challenges through open innovation.
What is Cyber Intelligence?
Cyber intelligence is the acquisition and analysis of information to identify, track, and predict cyber capabilities, intentions, and activities to offer courses of action that enhance decision making
Sound cyber intelligence practices can help organizations prevent or mitigate major security breaches. This is why the SEI's Emerging Technology Center has been conducting research on methodologies, processes, technology, and training to help organizations understand what it means to perform this work.
The Impact to Organizations
Cyber intelligence is important to all entities. While there has been much emphasis on tactical cyber intelligence to help understand the "on-the-network" cyber-attacks so frequently in the news, there has been little discussion about the discipline's strategic and operational levels to better understand the overall goals, objectives, and inter-relationships associated with these tactical attacks. As a result, key consumers such as C-level executives, executive managers, and other senior leaders are not getting the right type of cyber intelligence to efficiently and effectively inform their organizations' risk management programs.1
Educational Resources on Cyber Intelligence
White Paper- Cyber Intelligence Tradecraft Project: Summary of Key Findings
http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=40201
White Paper- CITP Training and Education
http://www.sei.cmu.edu/about/organization/etc/citp-training-and-education.cfm
Webinar- A Grassroots Approach to Improved Cyber Intelligence https://www.webcaster4.com/Webcast/Page/139/2631
Blog- Assessing the State of the Practice of Cyber Intelligence
http://blog.sei.cmu.edu/archives.cfm/author/troy-townsend
Podcast-The State of the Practice of Cyber Intelligence
http://www.sei.cmu.edu/podcasts/podcast_episode.cfm?episodeid=43858&wtPodcast=TheStateofthePracticeofCyberIntelligence
What is the Cyber Intelligence Research Consortium?
In June 2014, the SEI launched the Cyber Intelligence Research Consortium, a member-funded collaboration of practitioners and decision makers from all economic sectors and business sizes. The Consortium aims to help organizations make better judgments and quicker decisions related to cyber intelligence.
"Recent highly publicized security breaches reinforce the importance of cyber intelligence for any organization, regardless of size and economic sector," said Jay McAllister, a senior analyst in the SEI's Emerging Technology Center and technical lead of the Consortium. "But many organizations are operating without a research-verified set of practices. The Consortium will help organizations determine how best to excel in this emerging discipline."
The Consortium is an outgrowth of the SEI Cyber Intelligence Tradecraft Project, which sought to advance cyber intelligence capabilities by elaborating on best practices and prototyping solutions to shared challenges.
What Are the Member Benefits of the Consortium?
Organizations are joining the Cyber Intelligence Research Consortium to focus on improving the methodologies, processes, tools, and training that influence their cyber intelligence efforts. Members will address these topics by participating in a cyber threat baseline activity to identify their common challenges, interactive workshops to showcase relevant technologies, and a capture-the-flag exercise to hone their analytical skills. The Consortium also will produce how-to guides to help members successfully navigate key intelligence practices and technologies.
"One of the main benefits of joining the Cyber Intelligence Research Consortium," said McAllister, "is being able to contribute to and leverage best practices from different economic sectors. We believe the Consortium is uniquely positioned, because of its proximity to government, industry, and academia, to significantly influence the practice of cyber intelligence."
The Consortium's membership currently consists of practitioners and decision makers from multiple sectors, including government, energy, banking, defense contracting, and academia. New members may join at any time.
For details on joining the consortium please see:
http://www.sei.cmu.edu/about/organization/etc/overview.cfm
1 INSA Cyber Intelligence Task Force White Paper
http://www.insaonline.org/i/d/a/b/StrategicCyberWP.aspx
No comments:
Post a Comment