Threat modeling help in understanding, what all threat is there for an organization. Understand how these threats will affect the organization. Even a crude threat model will help to go a long way in defense against threats to an organization. Or at a minimum will increase visibility.
To understand in a society perspective, The spread of deadly “NIPHA” virus in our small state of Kerala, India. And how it was squashed.
Understanding potential host, Environmental factors, population density. Thousands of host had been simulated and human behavior added as a component. This would help health department to understand how virus expected to travel, and selecting the policy to counter the virus as no effective vaccine is available. Help to create operation guideline and policy to limit the possibility of infection. A model helps to identify what all intelligence might be missing and what all are need to make a better guideline.
If we take a lesson from different NCDC or military have done. We aren’t starting a threat intelligence from scratch.
Produce your threat intelligence model for your organization it doesn’t need to be perfect, Play around with it find the shortcoming improves upon it. It will help to understand what is important for your organization.
Where to get the raw information, to feed into threat intelligence model
- RSS Feeds
- Propitiatory feed
- Social Media
- Deep Web
- Govt alerts or CVE