Infoblox report: IT security professionals seek a better way to exchange and consume cyber threat intelligence
Source: Procre8 for Infoblox , Author: Posted by BI-ME staff
Posted: Tue February 13, 2018 12:11 pm

UAE.  Infoblox Inc., the network control company, today released the results of its third annual study on the state of threat intelligence exchange conducted by the Ponemon Institute.

The report titled “Exchanging Cyber Threat Intelligence: There Has to Be a Better Way,” found that while security professionals are increasingly recognizing the importance of threat intelligence, the majority remain dissatisfied with its accuracy and quality.

Meanwhile, because many security teams still execute threat investigations solo rather than pooling intelligence, their ability to quickly act on threats is limited. The report found that 67 percent of IT and security professionals spend more than 50 hours per week on threat investigations, instead of efficiently using security resources and sharing threat intelligence.

In a world where cyber criminals are becoming increasingly stealthy and sophisticated—with new threats on the rise ranging from ransomware to DNS hijacking—it is ineffective and costly for companies to defend themselves against cybersecurity threats alone.

According to the 1,200 IT security practitioners surveyed in the United States and EMEA, the consumption and exchange of threat intelligence has increased significantly since 2015. Despite the increase in the exchange and use of threat intelligence, most respondents from the survey are not satisfied with the current quality of the data.

Lack of accuracy and timeliness is among the top complaints about threat intelligence, which in turn hinders its effectiveness and security teams’ ability to quickly mitigate threats. In fact, only 31 percent of respondents cited threat intelligence as actionable.

But exchanging threat intelligence amongst peers, industry groups, IT vendors and government bodies can result in more holistic, accurate and timely threat intelligence and a stronger security posture. Two-thirds of respondents (66 percent) reported that threat intelligence could have prevented or minimized the consequence of a data breach or cyber attack, indicating that more infosecurity professionals are realizing the importance of threat intelligence.

“Cybersecurity takes a village, and this survey spotlights a real need for the cybersecurity community - and public sector to better cooperate and communicate to share intel on security threats,” said Dr. Larry Ponemon, Chairman and Founder of the Ponemon Institute.

“More accurate and comprehensive exchange of threat intelligence will speed our ability to respond to attacks and will result in stronger defense against cyber threats - whether that’s amongst enterprises or our nation’s critical infrastructure.”

The vast majority of respondents are focused on threat sharing, with 84 percent of organizations fully participating or partially participating in an initiative or program for exchanging threat intelligence with peers and/or industry groups.

But, most of these organizations are only participating in peer-to-peer exchange of threat intelligence (65 percent) instead of a more formal approach such as threat intelligence exchange services or consortium, which contributes to the dissatisfaction with the quality of the threat intelligence obtained.

“There’s a real need for actionable, timely and effective threat intelligence sharing,” said Jesper Andersen, CEO of Infoblox. “As industry players, we have a responsibility to our customers and consumers to make sure we’re doing everything to facilitate comprehensive threat intelligence within the ecosystem. This means establishing an exchange platform that enables sharing that is trusted, neutral and offers a 360-degree view of market threats.”

Other key findings from the survey include:
- Most respondents believe threat intelligence improves situational awareness, with an increase from 54 percent of respondents in 2014 to 61 percent of respondents in this year’s study.
- Sixty-six percent of respondents say shared information is not timely, and 41 percent say it is too complicated.
- Potential liability and lack of trust in intelligence providers prevent some organizations from fully participating in threat intelligence exchange programs, with 58 percent and 60 percent respectively citing these concerns.
- While the value of threat intelligence declines within minutes, only 24 percent of respondents say they receive threat intelligence in real time (nine percent) or hourly (15 percent).
- Seventy-three percent of respondents say they use threat indicators and the most valuable types of information are indicators of malicious IP addresses and malicious URLs.

“This report is an excellent follow up to our recently organized ‘Security and Next Gen Data Centre’ roadshow event in Dubai in terms of helping IT managers, CIOs and security teams understand how to make their organizations more secure, while ensuring high availability in the face of increasing cyber-attacks,” concludes Ashraf Sheet, Regional Director Middle East & Africa at ‎Infoblox.

Download the “Exchanging Cyber Threat Intelligence: There Has to Be a Better Way” study at this link.

Photo Captions:
1. (above)  Ashraf Sheet, Regional Director Middle East & Africa at ‎Infoblox
2. (inset)   Jesper Andersen, CEO of Infoblox (File photo)

About Infoblox
Infoblox delivers Actionable Network Intelligence to enterprise, government, and service provider customers around the world. As the industry leader in DNS, DHCP, and IP address management, the category known as DDI, Infoblox (www.infoblox.com) provides control and security from the core—empowering thousands of organizations to increase efficiency and visibility, reduce risk, and improve customer experience.

 

MIDDLE EAST BUSINESS COMMENT & ANALYSIS

date:Posted: December 11, 2018
UAE. Countries that take ambitious action against climate change can close up to 90% of their gap to Paris targets using existing technologies; Mitigation actions can also boost economic growth, says new BCG report.
date:Posted: December 10, 2018
UAE. After fantastic returns in 2017 everywhere, 2018 is a sea of red; Volatility rules, despite objective good news on the political front; Patience recommended as markets undershoot fundamentals.
date:Posted: December 10, 2018
UAE. Retail sales across four Gulf countries are projected to increase by more than US$24 billion over the next five years, according to new research from Euromonitor International; UAE's US$55 billion retail industry forecast to grow 16% by 2023.
UAE. Countries that take ambitious action against climate change can close up to 90% of their gap to Paris targets using existing technologies; Mitigation actions can also boost economic growth, says new BCG report.
dhgate