By. Andrew Largent COSC-480
Upstream Intelligence (UI) is data about IP’s, domains and Autonomous System Numbers (ASN) acting or representing the presence of a threat.
Roadmap UI Threats, Risks Layered Security Threat Agents Cyber Offense Conclusion
UI Intelligence derived from massive data sets from ISP an other carriers. UI is a source of information passed enterprise perimeters into the carrier networks. “no man’s land”. UI helps identify active threat agents on the Internet. UI powerful security tool, seen in the Cyber security Act of 2009 and the Nation Broadband Plan from the Federal Communication Commission in 2010.
UI UI consists of proactive and accurate identification of compromised devices and networks on large scales in real time!!! Significant asset recovery was the reason UI was developed and deployed.
Threats, Risks Evolving threats and threat agents driving up risks and the need for new security capabilities. Most successful crime on the Internet: identity theft, credit card and banking fraud, spamming, phishing and DOS attacks. UI identifies threat agents and targeted assets, rather than malware.
Threats, Risks 1990’s to early 2000’s malware developers wreaked havoc. Now money is to be made through malware exploitation, code is shared less and the best code is not shared at all.
Layered Security UI represents a new layer of security for all organizations. Fundamental concept “defense in depth.” Security Architecture.
Layered Security UI provides two enhancements to the defense-in- depth design.
Cyber Offense UI is not about counter-attacks. UI should not be identified with offensive activates against cyber-threats. UI was developed for defensive and self-preservation as opposed to offensive.
Conclusion Developing further into real-time systems for info/intel sharing to identify threats and threatened assets. Discussion!!
References Cybersecurity Act Federal Communications Commission, National Broadband Pla: Connecting America, Bell Canada Q Macaulay, Tyson IAnewsletter- Vol 13 No 3- Summer