managerloha.blogg.se - Open source risk engine setup

Web pages and other resources that can be found using Google certainly constitute massive sources of open source information, but they are far from the only sources.įor starters, a huge proportion of the internet ( over 99 percent, according to former Google CEO Eric Schmidt) cannot be found using the major search engines. If any specialist skills, tools, or techniques are required to access a piece of information, it can’t reasonably be considered open source.Ĭrucially, open source information is not limited to what you can find using the major search engines. The term “open source” refers specifically to information that is available for public consumption. The important phrase to focus on here is “publicly available.” Addresses a specific intelligence requirement.Is collected, analyzed, and disseminated in a timely manner to an appropriate audience.Is produced from publicly available information.

What Is Open Source Intelligence?īefore we look at common sources and applications of open source intelligence, it’s important to understand what it actually is.Īccording to U.S. In this blog, we’re going to cover the fundamentals of open source intelligence, including how it’s used, and the tools and techniques that can be used to gather and analyze it. Unfortunately, much like the other major subtypes - human intelligence, signals intelligence, and geospatial intelligence, to name a few - open source intelligence is widely misunderstood and misused. After all, it’s mostly free, and who can say no to that? Of all the threat intelligence subtypes, open source intelligence (OSINT) is perhaps the most widely used, which makes sense.

Having a clear strategy and framework in place for open source intelligence gathering is essential - simply looking for anything that could be interesting or useful will inevitably lead to burnout.

There is a dark side to open source intelligence: anything that can be found by security professionals can also be found (and used) by threat actors.

Most of the tools and techniques used to conduct open source intelligence initiatives are designed to help security professionals (or threat actors) focus their efforts on specific areas of interest.

As valuable as open source intelligence can be, information overload is a real concern.

It’s not limited to what can be found using Google, although the so-called “surface web” is an important component.

Open source intelligence is derived from data and information that is available to the general public.