Enhancing Information Sharing and Visualization Capabilities in Security Data Analytic Platforms

Collecting and processing Open Source Intelligence (OSINT) data is becoming a fundamental approach for obtaining cybersecurity threat information and awareness. Different types of useful information and Indicators of Compromise (IoCs) are obtained from OSINT sources, which keep security analysts updated about new and possible threats against the IT infrastructures they protect. However, skimming through various news feeds is a time consuming process and a source of all kinds of information (sometimes unuseful and not related to the monitored infrastructure) for any security analyst. Based on these shortcomings, we propose a Context-Aware OSINT Platform as a tool for enhancing visualization and information sharing capabilities in security data analytic platforms. The tool is not only able to collect OSINT data, but also to process it and filter only the relevant parts, thus enriching the attributes of the detected data, and consequently, decreasing the amount of information and the time required to analyze and act upon.