Given the vast amount of known threat indicators and level of network activity today, automation has become a necessity. It’s often difficult and time consuming for human analysts to efficiently manag

Given the vast amount of known threat indicators and level of network activity today, automation has become a necessity. It’s often difficult and time consuming for human analysts to efficiently manage large amounts of granular data and a wide range of cognitive biases. Therefore, manual threat correlation is often too slow to keep up with the amount of data generated, results include a high number of false negatives and positives, and outputs are not always reproducible.

However, performing manual threat correlation processes will remain crucial. The human brain’s ability to leverage well-formed biases and perform higher-order reasoning is essential for assessing the validity and value being provided by whatever solutions your organization uses as well as building your cyber threat management team’s knowledge base. Thus, even when automated methods are employed, the final tier of analysis typically uses these human abilities for sense-making before any actions are taken.

Conduct your own research and discuss with the group the following:

• Field Techniques of Comparison?
• Rules for Based Matching?
• What is Fuzzy Matching?

Bonus point

How threat actors can evade detection via threat correlation ?

To post in the discussion board you must do the following:

1)Using APA format create a new thread.Use guidelines indicated above to help you write your post,

2)Select AT LEAST 3other students' threads and post substantive comments on those threads.Your comments should extend the conversation started with the thread.

ALL original posts and comments must be substantive.(I'm looking for about a paragraph -not just "I agree.")

References:

Reid, R.D., and Sanders, N. (2016).Operations management. 6thed. Wiley. ISBN:978-1118