In order to counteract today’s sophisticated and increasing number of cyber threats the timely acquisition of information regarding vulnerabilities, attacks, threats, countermeasures and risks is crucial. Therefore, employees tasked with information security risk management processes collect information from a variety of information security data sources, ranging from inter-organizational threat intelligence sharing platforms to public information security data sources, such as mailing lists or expert blogs. To generate threat intelligence based on the collected information, a system for reporting and data analysis is needed. In the field of business intelligence, such a system is known as a data warehouse, which stores current and historical data in a single location. The goal of this thesis is to apply this concept to the information security domain and implement a data warehouse framework for cyber threat intelligence.
Built with Mobirise page builder