In the scope of the DiSIEM H2020 project, a pilot was built as a service to select cybersecurity threat intelligence from the Twitter stream, targeted to a specified information technology infrastructure. The pilot consists of a processing pipeline considering tweet collection, filtering, classification and clustering, of a dashboard for intelligence visualization and service configuration, and of mechanisms for integration with Security Information and Event Management (SIEM) systems.
The service is operating continuously and is integrated with SIEMs of DiSIEM partners security operation centers, EDP, Atos and Amadeus, and is being used by the Municipalities of Rome and Larissa.
