Data Collection and Exploratory Analysis for Cyber Threat Intelligence Machine Learning Processes

Abstract

Cyber threat intelligence powers machine learning and other data analysis techniques that provide enhanced protection and situational awareness to critical infrastructure application spaces. The Geo Threat Observable (GTO) research project gathers, processes, manages, and analyzes cyber threat intelligence to provide predictions based on system data, recover missing links in threat intelligence, and enable better use of limited cyber defense resources. Especially focused on the energy sector, GTO provides coherent common operational descriptions of infrastructure landscapes to empower cyber threat defenders. This paper focuses on the aggregation, cleaning, processing, management, validation, and analysis of cyber threat intelligence for the GTO project.