What is Cyber Threat Intelligence and How is it Evolving?

This chapter aims to give a clear idea about threat intelligence and how literature subdivides it given its multiple sources, the gathering methods, the information life‐span and who consumes the resulting intelligence. It focuses on the technical threat intelligence (TTI) issues and the emerging research studies, trends and standards to mitigate these issues. The chapter provides some examples of these new generation threats. It shows how a common standardized representation of TTI improves the quality of threat information which improves automated analytics solutions on large volumes of TTI suffering from non‐uniformity and redundancy. The chapter evaluates TTI tools which aim to share threat intelligence between organizations. It describes the benefits of TTI and explores the reasons for not sharing TI. The cloud is seen as the proper place to host the cyber threat intelligence library, since cloud computing provides computation, storage and distributed capability in support of big data processing used by this library.