Talk E-3: Understanding the Anatomy of Cybersecurity Advisory Feed Data

Advisories were among the first Cyber Threat Intelligence (CTI) ever shared. We present an analysis of multiple commercial providers of advisory feeds.
For that purpose a set of measures is defined suitable to evaluate different advisory data feeds for cybersecurity analysis. An anonymized evaluation of five providers is presented using the defined measures.
As conclusion, interpretations and implications of this evaluation are provided, revealing underlying structures and philosophies. We deliver insights into data commonly used by practitioners and overlooked by the scientific community.
This offers a better understanding of advisory feed data and improves utilization of the information, both for consumers to choose fitting feeds and for producers to improve the feed data.