The Evolving Role of Threat Intelligence | Arbor Networks
http://www.pravail.com Global Threat Intelligence Arbor Networks has leveraged its pervasive product deployments in service provider networks to develop ATLAS, a unique global threat monitoring network. Nearly three hundred service provider customers have agreed to share anonymous traffic data with Arbor, totaling 80Gbps. This massive data set is further enhanced by a global honeypot network of sensors in dark IP address space as well as strategic partnerships, such as the Red Sky Alliance. Together, this gives Arbor unprecedented visibility into the global threat landscape. According to Arbor Networks Director of Security Research Dan Holden, attackers are openly communicating and sharing the intelligence they have gathered about a target's defenses and perceived vulnerabilities. According to Holden, "The threat sharing is an interesting issue. Honestly the only vertical that is really good at this is finance with their FS-ISAC and other related trust groups. I will tell you that most of the security industry is terrible at sharing information as some are heavily invested in security research and others aren't, so there can be limited value in sharing. I can tell you the IPS industry shared nothing (was a big mistake). However, the A/V and ISP industries are quite good at sharing and have been for a very long time. Where the real value comes into play generally is hand shake agreements just as in the earlier days of the Internet based on trust and relationships. Formal sharing is very rare outside of the FS ISAC from what I've seen. Your reputation as a person and as a company go a very long way as thus far the trust groups have the best info."