Facebook’s Threat Intelligence Sharing Potential

Enterprise organizations are actively consuming external threat intelligence, purchasing additional threat intelligence feeds, and sharing internally-derived threat intelligence with small circles of trusted third-parties.  Based upon these trends, it certainly seems like the threat intelligence market is well- established but in this case, appearances are far from reality.

In my humble opinion, threat intelligence consumption and sharing is extremely immature today with the market divided by a few haves (i.e. large banks, defense contractors, large IT vendors, intelligence agencies) and a large majority of have-nots – everyone else.

This immaturity is illustrated by some recent ESG research (note: I am an ESG employee).  A panel of cybersecurity professionals working at enterprise organizations (i.e. more than 1,000 employees) were asked to identify weaknesses associated with their firm’s threat intelligence consumption and sharing programs.  The data indicates:

    28% of organizations claim that threat intelligence isn’t as timely or as actionable as they need it to be.  This may mean that they haven’t found the right threat intelligence feeds or sharing partners.
    26% of organizations say that threat intelligence contains too many false positive alerts.  This is an indictment of raw threat intelligence and speaks to weaknesses with threat intelligence vetting and quality metrics.
    26% of organizations indicate that threat intelligence does not come in a standard format so the cybersecurity staff is required to develop tools or use manual processes to normalize the data.  So like other areas of cybersecurity, operational complexity is getting in the way of efficiency.
    26% of organizations state that threat intelligence sharing is immature and requires too much manual labor and customization to gain maximum value out of the sharing process.  Simply stated, it is just too hard to share threat intelligence in an efficient and scalable way.

Based upon this and lots of other data from the ESG Threat Intelligence research report, the current state of threat intelligence sharing is hamstrung by inaccurate data, immature processes, and operational overhead.  Sure, the good people in Washington could pass some type of public/private threat intelligence sharing legislation (i.e. CISPA, CISA, etc.) sometime this year, but new laws won’t do diddly squat to solve these basic problems.  As of now, we are light years away from benefitting from the potential of threat intelligence sharing.

Now how can this situation get rectified?  Hmm, what may be helpful here is some type of cloud-based organization that knows how to collect, process, analyze, refer, and distribute massive amounts of data.  A firm like this can act as a threat intelligence sharing hub, take a leadership and innovative position, and create some type of intuitive yet intelligent threat intelligence sharing portal for the masses.

Enter Facebook and its ThreatExchange platform announced this past February.  According to a blog by Mark Hammell, manager of Facebook’s threat infrastructure team (described here by the WSJ), more than 90 organizations are now sharing threat intelligence via ThreatExchange, including Dropbox, PayPal, Microsoft, Yahoo, and other firms financial services, IT, etc.

Now I know that there are numerous threat intelligence sharing platforms competing in this burgeoning but nascent space, but Facebook’s skill set may give it some market advantages:

1.       Facebook knows how to collect, process, and categorize massive quantities of data.  This is really the foundation of threat intelligence sharing so Facebook could easily offload a lot of the heavy lifting for enterprise organizations.  ThreatExchange will only increase its usefulness here when it adopts STIX and TAXII support later this year.

2.       Facebook is built on managing dynamic communities of interest.  This is important to me since the current threat intelligence sharing model is tightly-coupled around vertical industries – a good start but the same cyber adversaries attacking big banks are hacking into other industries as well.  Given today’s threat landscape we need a more flexible approach designed for ad-hoc peer-to-peer threat intelligence sharing relationships based upon real-time changes associated with threats in-the-wild and software vulnerabilities.

3.       Facebook algorithms are designed to see patterns related to data consumption, user behavior, and changes within the data itself.  This is critical as we need to supplement the basic manual exchange of threat intelligence data with artificial intelligence that detects anomalous behaviors that typical security analysts and forensic investigators miss.

Now I admit that given Facebook’s track record on privacy, I am as skeptical as anyone about Facebook’s direct participation in threat intelligence sharing.  To succeed, Facebook must convince the cybersecurity community that ThreatExchange is a different use case for the company’s infrastructure and that its threat intelligence sharing platform aligns Facebook’s technical chops with a (legal) commitment to confidentiality, privacy, and trust.

Given its history and business model, it would be easy to dismiss ThreatExchange but I suggest that the cybersecurity community maintain an open mind.  If you really think about what’s needed to achieve the potential benefits of threat intelligence sharing, Facebook’s infrastructure and expertise fits hand-in-glove.

Ten years ago, no one ever imagined that a retailer like Amazon would reinvent how computing is done.  If Facebook marries its technology prowess with a true cybersecurity commitment, it could achieve a similar leadership position by reinventing threat intelligence sharing.  If this happens, everyone could benefit.

iPhone 6 vs. iPhone 6 Plus

iPhone 6 vs. iPhone 6 Plus
Apple announced the two new iPhones, the iPhone 6 and iPhone 6 Plus

Apple iPhone 6 Plus

Apple iPhone 6

Operating system
iOS 8
6.22 x 3.06 x 0.28 inch,
6.07 oz
5.41 x 2.64 x 0.28 inch
3.99 oz
Apple A8
Apple A8
8 MP Rear; 1.2 MP Front-Facing
5.5 inch retina display, 1920 x 1080 pixels
401 ppi
4.7 inch retina display, 1334 x 750 pixels
326 ppi

802.11 a/b/g/n/ac
Bluetooth v4.1, A2DP, EDR, LE
802.11 a/b/g/n/ac
Bluetooth v4.0, A2DP, EDR, LE

Samsung Galaxy Note 4 vs Samsung Galaxy Note 3

Galaxy Note 4

Galaxy Note 3

Operating system
Android OS, v4.4.4 (KitKat)
Android OS, v4.3 (Jelly Bean)
153.5 x 78.6 x 8.5 mm,
176 g
151.2 x 79.2 x 8.3 mm
168 g
Qualcomm Snapdragon 805 (SM-N910S)
Exynos 5433
Qualcomm Snapdragon 800 (N9005, N9002)/ Exynos 5 Octa 5420 (N9000)
16 MP, 3456 x 4608 pixels, optical image stabilization, autofocus, LED flash.
3.7 MP, 1080p@30fps
13 MP, 4128 x 3096 pixels, autofocus, LED flash

2 MP, 1080p@30fps
Super AMOLED capacitive touchscreen, 1440 x 2560 pixels, 5.7 inches
Super AMOLED capacitive touchscreen, 1080 x 1920 pixels, 5.7 inches
microSD, up to 64 GB, 32 GB,
microSD, up to 64 GB, 16/32/64 GB, 3 GB RAM
Wi-Fi 802.11 a/b/g/n/ac, dual-band, Wi-Fi Direct, DLNA, Wi-Fi hotspot
Bluetooth v4.1, A2DP, EDR, LE
Wi-Fi 802.11 a/b/g/n/ac, dual-band, Wi-Fi Direct, DLNA, Wi-Fi hotspot.
Bluetooth v4.0, A2DP, EDR, LE

Samsung announces Galaxy Note 4

Samsung announced the new Samsung galaxy note 4 powered by quad core processor with Android 4.4.4 KitKat OS. This device comes with 3 GB RAM and 32 GB storage. This device has 5.7 inch Quad HD super AMOLED display. Samsung galaxy note 4 features a 16 MP rear camera and 3.7 MP front camera.

Nokia Lumia 525 budget Windows Phone with 1GB of RAM unveiled

Nokia officially announced the long rumored budget Smartphone nokia lumia 525.  Nokia lumia 525 runs on Windows phone 8 and powered by a 1GHz dual core Qualcomm Snapdragon S4 Processor along with 1 GB RAM. New Lumia 525 is comes with a 4 inch WVGA IPS display with 480x800 pixel resolution. It packs a1430mAh battery which delivers 17 hours of talk time and 336 hours of standby time. Nokia Lumia 525 comes with 8 GB inbuilt memory and it can be expandable up to 64 GB. It packs a 5 MP front camera and connectivity options include 3G, Wi-Fi, Bluetooth, A-GPS, A-GlONASS.

nokia lumia 525

Micromax A116i specifications, features and price in india

Micromax has launched the new Micromax A116i India at Rs. 12,090. Micromax A116i is runs on Android 4.2 Jelly Bean OS and powered by a 1.2 GHz quad core Mediatek MT6589 processor along with 1 GB RAM. Micromax A116i sports a5 inch HD display with 720p resolution. It has 4 GB inbuilt memory, expandable up to 32 GB with microSD. There is one 8 MP rear camera and a VGA front camera. Connectivity options include, 3G, Wi-Fi, microUSB. A Micromax A116i packs 2000 mAh battery, delivers 5 hours of talk time and 170 hours of standby time.

Micromax A116i

Specifications of  Micromax A116i

5-inch 720p HD display
Android 4.2 Jelly Bean
1.2GHz quad-core Mediatek MT6589 processor
Dual-SIM support
3G, Wi-Fi, Bluetooth, MicroUSB 2.0
8 MP rear camera ,VGA front camera
2000 mAh

Samsung galaxy Grand 2 features and specification revealed

Samsung has launched the new Samsung galaxy Grand 2, descendant of the galaxy grand. It comes with a 5.2 inch HD TFT display with 720 x 1280 pixel resolution. Samsung galaxy Grand 2 is runs on Android 4.3 jelly Bean OS and powered by a 1.2 GHz Quad core processor along with a 1.5 GB RAM. Samsung galaxy Grand 2 sports a8 MP rear autofocus LED flash camera and 1.9 MO front camera. It comes with dual SIM Support GSM+GSM and connectivity features includes 3G, Wi-Fi, Bluetooth 4.0, GPS/GLONASS and microSD. Samsung galaxy Grand 2 has 8 GB inbuilt memory, expandable up to 64 GB with microSD. This phone weighs 163 gms and 8.9 mm thick. It packs a 2600 mAh battery, which deliver up to 17 hours of talk time.

Related story: Micromax launched the new micromax A116i

Karbonn A15+ price in India, features and specifications

Karbonn has released the new Mid range Android runs smartphone in India for Rs 5,899. Karbonn A15+ has 4 inch WVGA display with 480x800 pixel resolution. The smartphone is runs on Android 4.2 Jelly bean OS and powered by a 1.3 GHz dual core processor along with 512 MB RAM. Karbonn A15+ packs a5 MP Autofocus rear camera. Connectivity options include 3G, Wi-Fi, Bluetooth and GPS. Karbonn A15+ supports dual SIM and this smartphone has 4 GB inbuilt memory expandable up to 32 GB with microSD card.
Related story: Karbonn A1+ price in india

Karbonn A15+

Twitter Facebook RSS YouTube Google
© 2014 | Distributed By Free Blog Templates | Designed By WildBlogger