Match each threat intelligence source classification on the left with its primary enterprise operational use case on the right.
- Open-Source Intelligence (OSINT)Gathering freely available security research from public vendor blogs, code repositories, and open advisories.
- Information Sharing and Analysis Center (ISAC)Sharing sector-specific, confidential threat warnings and adversary indicators with industry peer organizations.
- Proprietary Threat Intelligence FeedIngesting paid, commercial indicator streams curated by specialized vendors for low-noise alert enrichment.
- National Vulnerability Database (NVD)Correlating enterprise software inventory against standardized Common Vulnerabilities and Exposures (CVE) and CVSS risk scores.
Answer
Open-Source Intelligence (OSINT) matches with gathering freely available security research from public sources; Information Sharing and Analysis Center (ISAC) matches with sharing sector-specific, confidential threat warnings with industry peers; Proprietary Threat Intelligence Feed matches with ingesting paid, commercial indicator streams from specialized vendors; National Vulnerability Database (NVD) matches with correlating software inventory against standardized CVE identifiers and CVSS risk scores.
Open-Source Intelligence (OSINT) involves analyzing publicly accessible security data without cost. Information Sharing and Analysis Centers (ISACs) provide trusted peer-to-peer threat sharing specifically tailored to industry sectors like finance or healthcare. Proprietary threat feeds offer commercially licensed, high-fidelity threat indicators for specialized SOC ingestion. The National Vulnerability Database (NVD) acts as the primary repository for standardized CVE records and CVSS scoring to drive vulnerability management.
Step-by-Step Solution
Key Concept
Categorization and Application of Threat Intelligence Sources