Threat Intelligence in Support of Cyber Situation Awareness

Threat Intelligence in Support of Cyber Situation Awareness by Billy P. Gilliam MISM, University of Phoenix 2007 B.S., University of Phoenix, 2005 Dissertation Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Philosophy Management Walden University November 2017 Abstract Despite technological advances in the information security field, attacks by unauthorized individuals and groups continue to penetrate defenses. Due to the rapidly changing environment of the Internet, the appearance of newly developed malicious software or attack techniques accelerates while security professionals continue in a reactive posture with limited time for identifying new threats. The problem addressed in this study was the perceived value of threat intelligence as a proactive process for information security. The purpose of this study was to explore how situation awareness is enhanced by receiving advanced intelligence reports resulting in better decision-making for proper response to security threats. Using a qualitative case study methodology a purposeful sample of 13 information security professionals were individually interviewed and the data analyzed through Nvivo 11 analytical software. The research questions addressed threat intelligence and its impact on the security analyst’s cognitive situation awareness. Analysis of the data collected indicated that threat intelligence may enhance the security analyst’s situation awareness, as supported in the general literature. In addition, this study showed that the differences in sources or the lack of an intelligence program may have a negative impact on determining the proper security response in a timely manner. The implications for positive social change include providing leaders with greater awareness through threat intelligence of ways to minimize the effects of cyber attacks, which may result in increasing business and consumer confidence in the protection of personal and confidential information.Despite technological advances in the information security field, attacks by unauthorized individuals and groups continue to penetrate defenses. Due to the rapidly changing environment of the Internet, the appearance of newly developed malicious software or attack techniques accelerates while security professionals continue in a reactive posture with limited time for identifying new threats. The problem addressed in this study was the perceived value of threat intelligence as a proactive process for information security. The purpose of this study was to explore how situation awareness is enhanced by receiving advanced intelligence reports resulting in better decision-making for proper response to security threats. Using a qualitative case study methodology a purposeful sample of 13 information security professionals were individually interviewed and the data analyzed through Nvivo 11 analytical software. The research questions addressed threat intelligence and its impact on the security analyst’s cognitive situation awareness. Analysis of the data collected indicated that threat intelligence may enhance the security analyst’s situation awareness, as supported in the general literature. In addition, this study showed that the differences in sources or the lack of an intelligence program may have a negative impact on determining the proper security response in a timely manner. The implications for positive social change include providing leaders with greater awareness through threat intelligence of ways to minimize the effects of cyber attacks, which may result in increasing business and consumer confidence in the protection of personal and confidential information. Threat Intelligence in Support of Cyber Situation Awareness by Billy P. Gilliam MISM, University of Phoenix, 2007 B.S., University of Phoenix, 2005 Dissertation Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Philosophy Management Walden University November 2017 Dedication To my wife, Cindy. Your love, support, and encouragement have been a guiding light during my journey. You sacrificed so much and stood by me in times of success and frustrations, always with words of encouragement. Your prayers gave me the motivation to continue to achieve this goal when many times I was ready to quit. I am truly blessed to have you in my life. Acknowledgments I want to acknowledge my dissertation committee: Dr. David Bouvin, Dr. Godwin Igein, and Dr. Judith Forbes. The dissertation committee provided direction, patience, and support throughout the dissertation process. A special acknowledgement to my Dissertation Chair and Mentor, Dr. Bouvin. Your encouragement, advice, and guidance kept me on the right track and instilled in me the motivation and inspiration to keep going, do my best, and achieve my personal goal. I am also grateful to my family and friends who I did not mention but shared in some way my extraordinary journey. You gave me encouragement when I needed it most, strengthen when I was too tired to continue, and celebrated with me on achieving milestones towards the finish line.