Consequence is not enough: The role of cyber intelligence in improving cyberattack estimates

Sarah Freeman and Mark Bristow
Additional contact information
Sarah Freeman: Cyber Infrastructure Protection Innovation Center (CIPIC), USA
Mark Bristow: Cyber Infrastructure Protection Innovation Center (CIPIC), USA

Cyber Security: A Peer-Reviewed Journal, 2024, vol. 7, issue 3, 199-206

Abstract: Intelligence assessments continue to emphasise adversary ability and desire to hold critical infrastructure at risk. At the same time, the field of cyber threat intelligence is predominately focused on a review of past cyberattacks to yield insights into future risk. Few researchers focus on methods to improve assessments of adversary capability and intent or address the need for more proactive, predictive analysis. This paper identifies some of the existing weaknesses in cyber threat intelligence analysis and provides some recommendations for how organisations can more comprehensively consider their cyber risk.

Keywords: risk management; threat intelligence; critical infrastructure; impact-driven analysis (search for similar items in EconPapers)
JEL-codes: M15 (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/8268/download/ (application/pdf)
https://hstalks.com/article/8268/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:csj000:y:2024:v:7:i:3:p:199-206

Access Statistics for this article

More articles in Cyber Security: A Peer-Reviewed Journal from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().