Paper Title
Threat Intelligence Sharing Platform Implementation Using MISP
Abstract
A Threat Intelligence Sharing Platform utilizing the Malware Information Sharing Application & Threat Sharing (MISP) framework is designed to enhance organizational cybersecurity by detecting and mitigating online threats. The platform actively monitors activities such as invalid login attempts to administrative accounts and attempts to access malicious IPs or domains. When that a such activities are identifies, users are immediately blocked from accessing harmful resources. Additionally, MISP ensures that unauthorized employees attempting to log into higher authority accounts are detected and restricted. The platform also monitors employees' access to online web resources, preventing the opening of domains known to host malware, there by safeguarding the organization's servers. MISP continuously analyzes and shares threat intelligence across the platform, fostering a collaborative security environment. Detected malicious domains are shared in real-time with other users, creating a network of protection. By utilizing MISP, organizations can achieve proactive threat detection and response, strengthening their defense mechanisms and improving overall security posture against potential cyber-attacks.
Keywords - Threat Intelligence Sharing Platform, Malware Information Sharing Platform & Threat Sharing, Cybersecurity, Web Application.