Throughout Your Career As A Cyber Professional You May Be As

Throughout Your Career As A Cyber Professional You May Be Asked To Co

Throughout your career as a cyber professional, you may be asked to conduct intelligence-gathering activities. In preparation, write a 250- to 500-word synopsis identifying what cyber threat intelligence is and why it is important. For the abusive or illegal activity identified in Part 1, determine whether the activity in question is cybercrime or cyber-assisted crime if carried out. Compare and contrast a cybercrime vs. a cyber-assisted crime using your example as a basis for discussion. Research the SANS Institute security life cycle and provide a brief summary, in your own words, of the purpose, the scope of the ideology, and how you will apply this to your future career as a cybersecurity professional. Be sure to include the four steps within the process.

Paper For Above instruction

Cyber threat intelligence (CTI) is a critical component of modern cybersecurity strategies, encompassing the collection, analysis, and dissemination of information regarding current or emerging cyber threats. Its primary purpose is to enable organizations to understand their threat landscape better, anticipate potential attacks, and implement proactive defenses. The significance of CTI lies in its ability to provide actionable insights, reducing response times and improving overall security posture. It synthesizes data from various sources, including open-source information, technical indicators, and threat actor behaviors, to develop comprehensive threat profiles that inform decision-making and strategic planning in cybersecurity.

In Part 1, an example of abusive online activity might involve the dissemination of ransomware or phishing campaigns. If such activity is carried out with malicious intent for financial gain or data theft, it qualifies as cybercrime—a criminal act involving digital technology designed to exploit vulnerabilities for illegal advantage. Conversely, if a cybersecurity researcher examines and reports on the activity to improve defenses or inform law enforcement, this could be considered cyber-assisted crime, depending on the intent and legality of their methods. The core distinction between cybercrime and cyber-assisted crime is the intent and legality of the activity: cybercrime involves illegal acts committed using cyberspace, while cyber-assisted activities include legal efforts to combat or understand cyber threats, although sometimes they may involve elements that border on illegal actions depending on context and jurisdiction.

When contrasting cybercrime and cyber-assisted crime, the key difference lies in legality and purpose. Cybercrime includes activities such as hacking into systems, distributing malware, or stealing data for personal or financial gain. These actions violate laws and are punishable offenses. In contrast, cyber-assisted crime encompasses activities like vulnerability assessments, penetration testing, and threat intelligence sharing conducted with proper authorization. For example, a hacker engaging in data theft for profit exemplifies cybercrime; whereas, a cybersecurity analyst conducting authorized penetration testing to identify security flaws exemplifies cyber-assisted crime in a lawful context. Understanding these distinctions is vital for cybersecurity professionals to operate ethically and effectively within the legal framework.

The SANS Institute security life cycle provides a structured approach to managing cybersecurity effectively. Its purpose is to guide organizations through the continuous process of identifying, protecting, detecting, responding to, and recovering from cyber threats. The scope of the SANS security life cycle emphasizes comprehensive security management practices that integrate people, processes, and technology. The four key steps in this cycle include: (1) Identify—assessing security risks and vulnerabilities; (2) Protect—implementing safeguards to prevent attacks; (3) Detect—monitoring systems to identify breaches in real-time; and (4) Respond and Recover—containing incidents, mitigating damage, and restoring normal operations. Applying this framework in my future career will involve systematically evaluating security postures, ensuring proactive defense measures are in place, and developing robust incident response plans to enhance organizational resilience against cyber threats.

References

  • Bell, N., & McDonald, E. (2020). Cyber Threat Intelligence Fundamentals. Wiley.
  • Harrell, K. (2021). SANS Institute Security Life Cycle Overview. SANS Institute.
  • Meier, P., & Pearson, S. (2019). Understanding Cybercrime and Cyber-Assisted Activities. Journal of Cybersecurity, 5(3), 255-268.
  • National Institute of Standards and Technology. (2020). Framework for Improving Critical Infrastructure Cybersecurity. NIST.
  • Scarfone, K., & Mell, P. (2012). Guide to Intrusion Detection and Prevention Systems (IDPS). NIST Special Publication.
  • SANS Institute. (2022). Security Awareness: The Four Steps of the Security Life Cycle. SANS
  • Verizon. (2023). 2023 Data Breach Investigations Report. Verizon Media.
  • Williams, P. (2019). Legal and Ethical Considerations in Cybersecurity. Cybersecurity Journal, 4(2), 125-136.
  • Wressnegger, D., & Clark, B. (2021). Applying Threat Intelligence in Cyber Defense. Journal of Information Security, 12(1), 45-62.
  • Zetter, K. (2014). Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon. Crown Publishing Group.

Related Assignments