Threat Intelligence Quality Dimensions for Research and Practice

Abstract

As the adoption and diversity of cyber threat intelligence solutions continue to grow, questions about their effectiveness, particularly in regards to the quality of the data they provide, remain unanswered. Several studies have highlighted data quality issues as one of the most common barriers to effective threat intelligence sharing. Nevertheless, research and practice lack a common understanding of the expected quality of threat intelligence. To investigate these issues, our research utilised a systematic literature review followed by a modified Delphi study that involved 30 threat intelligence experts in Europe. We identify a set of threat intelligence quality dimensions along with revised definitions for threat data, information and intelligence.