Atomic Lifecycle for Cyber Threat Intelligence

The utilisation of cyber threat intelligence provides a multitude of advantages in the assurance of security. A growing body of research is being published on the subject of cyber threat intelligence. However, the precise sequence of steps involved in the cyber threat intelligence life cycle remains unclear. The life cycle presented in each study is not consistent. Moreover, the transition from data to intelligence throughout the life cycle is not sufficiently delineated. The intelligence produced in many studies can be of different types. In our study, all existing lifecycles were examined and their naming approaches were analysed. The objective was to present a cyber threat intelligence life cycle that is as atomic as possible, with each step clearly expressed. This should facilitate a more rigorous comparison of studies in the existing literature on cyber threat intelligence. Furthermore, the life cycle can be utilised in new cyber threat intelligence studies. Researchers who aspire to implement best practices in their study are able to run more effective processes by following the life cycle.