THE COMPARATIVE ANALYSIS OF SELECTED CYBER THREAT INTELLIGENCE SHARING PLATFORMS

Cyber threat intelligence has become increasingly present in corporate security systems as it has great importance in mitigating threats and, consequently, reducing damage from attacks. Several efforts have been conducted in Cyber Security field within the past years on Threat Intelligence Platforms. From the practical perspective, the last years were shaped by growth regarding the implementation of threat intelligence platforms, the used indicators (e.g., hash values, TTPs), and the number of TI sources available. As the field settles into its new maturity, understanding and improving the effectiveness of CTI programs will become even more critical. Until now, several TISPs have been identified, analyzed and a classification framework has been developed. What is still lacking is a broad-based examination of existing TISPs using a comparative and broadly applicable literature review. Comparatives Analyses will be conducted on some selected TISPs based on User feedback, platforms reliability, community support, Ease to use and License model, Performance matrix, durability, number of active users. SWOT (Strengths, Weakness, Opportunities, threats) analysis for each platform and Ethical Considerations. The methodology contains the approach proposed to evaluate CTI standards and platforms is described. First, a method is developed to restrict and define which standards and platforms will be analyzed and evaluate. Then, the predefined criteria for evaluation, SWOT analysis, and features comparison matrix are explained. The selected Threat Intelligence Sharing platforms listed are evaluate based on their popularity and license model among the user in the cybersecurity ecosystem. Considering the results obtained with the literature research, complemented with the review of the official web sites and documentation of most standards, the standards were ranked in terms of popularity and license model results are presented. The selected TISPs comparative analysis on features comparison matrix which include Platform type, Threat intelligence sharing, Data formats supported, Community driven intelligence, Advanced Analytics, Incident response integration, Integration with SIEMS/other Tools, Malware, Cloud-based, Endpoint protection integration, Scalability, Customization and Cost. These features analysis will give an organization the insights of the platform suitable for the organization which also depends on factors such as the organization’s size, budget, and the specific needs of its security infrastructure. Larger enterprises may benefit from the advanced capabilities of ThreatConnect, IBM X-Force Exchange, or Cisco TID, while smaller organizations might opt for open-source solutions like MISP or AlienVault OTX. For quick, simple analysis, VirusTotal is a strong option, especially for small-scale use