Collaborative Cyber Threat Intelligence: Detecting and Responding to Advanced Cyber Attacks on National Level

Threat intelligence is a surprisingly complex topic that goes far beyond the obvious technical challenges of collecting, modelling and sharing technical indicators. Most books in this area focus mainly on technical measures to harden a system based on threat intel data and limit their scope to single organizations only. This book provides a unique angle on the topic of national cyber threat intelligence and security information sharing. It also provides a clear view on ongoing works in research laboratories world-wide in order to address current security concerns at national level. It allows practitioners to learn about upcoming trends, researchers to share current results, and decision makers to prepare for future developments.

Table of Contents

Chapter 1 Introduction
Chapter 2 A Systematic Study And Comparison Of Attack Scenarios And Involved Threat Actors
Chapter 3 From Monitoring, Logging, And Network Analysis To Threat Intelligence Extraction
Chapter 4 The Importance Of Information Sharing And Its Numerous Dimensions To Circumvent Incidents And Mitigate Cyber Threats
Chapter 5 Cyber Threat Intelligence Sharing Through National And Sector-Oriented Communities
Chapter 6 Situational Awareness For Strategic Decision Making On A National Level
Chapter 7 Legal Implications Of Information Sharing
Chapter 8 Implementation Issues And Obstacles From A Legal Perspective
Chapter 9 Real-World Implementation Of An Information Sharing Network: Lessons Learned From The Large-Scale European Research Project Ecossian