A4 Article in conference proceedings
Strategic cyber threat intelligence : Building the situational picture with emerging technologies (2020)

Voutilainen, J., & Kari, M. (2020). Strategic cyber threat intelligence : Building the situational picture with emerging technologies. In T. Eze, L. Speakman, & C. Onwubiko (Eds.), ECCWS 2020 : Proceedings of the 19th European Conference on Cyber Warfare and Security (pp. 545-553). Academic Conferences International. Proceedings of the European conference on information warfare and security. https://doi.org/10.34190/EWS.20.030

JYU authors or editors

Publication details

All authors or editors: Voutilainen, Janne; Kari, Martti

Parent publication: ECCWS 2020 : Proceedings of the 19th European Conference on Cyber Warfare and Security

Parent publication editors: Eze, Thaddeus; Speakman, Lee; Onwubiko, Cyril

Conference:

Place and date of conference: University of Chester, UK (virtual conference), 25-26.6.2020

ISBN: 978-1-912764-61-7

eISBN: 978-1-912764-62-4

Journal or series: Proceedings of the European conference on information warfare and security

ISSN: 2048-8602

eISSN: 2048-8610

Publication year: 2020

Pages range: 545-553

Publisher: Academic Conferences International

Publication country: United Kingdom

Publication language: English

DOI: https://doi.org/10.34190/EWS.20.030

Publication open access: Not open

Publication channel open access: 

Publication is parallel published (JYX): https://jyx.jyu.fi/handle/123456789/73976

Abstract

In 2019, e-criminals adopted new tactics to demand enormous ransoms from large organizations by using ransomware, a phenomenon known as “big game hunting.” Big game hunting is an excellent example of a sophisticated and coordinated modern cyber-attack that has a significant impact on the target. Cyber threat intelligence (CTI) increases the possibilities to detect and prevent cyber-attacks and gives defenders more time to act. CTI is a combination of incident response and traditional intelligence. Intelligence modifies raw data into information for decision-making and action. CTI consists of strategic, operational, or tactical intelligence on cyber threats. Security event monitoring, event-based response, and anomaly and signature-based detection can create the basis of the situation in cyberspace. To achieve a uniform situational picture, long-term assessment is required. Strategic CTI informs broad or long-term issues and provides situation awareness as well as an analyzed overview of the threat landscape and early warning of cyber threats. This paper describes how the implementation of artificial intelligence (AI) and machine learning (ML) can be utilized in strategic CTI. The results were arrived at using the design science research methodology. We propose a solution that uses AI as a component of strategic CTI. Furthermore, the paper is a literature survey, integrating research literature on intelligence, cybersecurity, and AI. The paper presents the concept of CTI and its relation to the situational picture of cyberspace. It also addresses the possibilities of natural language understanding for large-scale content analysis and introduces a solution in which an existing enriched dataset provided valuable strategic-level information about an ongoing malicious cyber event. The paper is part of Ph.D. research concerning comprehensive CTI. Other articles in the dissertation discuss emerging technologies in operational and tactical CTI.

Keywords: cyber security; cyber attacks; artificial intelligence; machine learning; intelligence and reconnaissance

Free keywords: Artificial Intelligence; machine learning; Strategic Cyber Threat Intelligence

Contributing organizations

Ministry reporting: Yes

Reporting Year: 2020

JUFO rating: 1