A Research and Analysis Method of Open Source Threat Intelligence Data

As the form of cyber threats becomes more complex, which leads to a widespread concern about how to promote network security active defense system by using the exploding cyber threat intelligence. Basing on the content analysis method, introduces the precision, recall rate and timely rate on the basis of the change of time dimension, and analyzes the threat intelligence provider from three aspects. The validity of this method is verified by the test of massive source of threat data, which improves the efficiency of CIF analysis and makes it easy to analyze and extract the threat intelligence information quickly.