Santos Pedro, Abreu Rafael, Reis Manuel J C S, Serôdio Carlos, Branco Frederico
Department of Engineering, School of Sciences and Technology, University of Trás-os-Montes e Alto Douro, 5000-801 Vila Real, Portugal.
Engineering Department, Institute of Electronics and Informatics Engineering of Aveiro (IEETA), University of Trás-os-Montes e Alto Douro, 5000-801 Vila Real, Portugal.
Sensors (Basel). 2025 Jul 9;25(14):4272. doi: 10.3390/s25144272.
Cyber threat intelligence (CTI) has become critical in enhancing cybersecurity measures across various sectors. This systematic review aims to synthesize the current literature on the effectiveness of CTI strategies in mitigating cyber attacks, identify the most effective tools and methodologies for threat detection and prevention, and highlight the limitations of current approaches. An extensive search of academic databases was conducted following the PRISMA guidelines, including 43 relevant studies. This number reflects a rigorous selection process based on defined inclusion, exclusion, and quality criteria and is consistent with the scope of similar systematic reviews in the field of cyber threat intelligence. This review concludes that while CTI significantly improves the ability to predict and prevent cyber threats, challenges such as data standardization, privacy concerns, and trust between organizations persist. It also underscores the necessity of continuously improving CTI practices by leveraging the integration of advanced technologies and creating enhanced collaboration frameworks. These advancements are essential for developing a robust and adaptive cybersecurity posture capable of responding to an evolving threat landscape, ultimately contributing to a more secure digital environment for all sectors. Overall, the review provides practical reflections on the current state of CTI and suggests future research directions to strengthen and improve CTI's effectiveness.
网络威胁情报（CTI）在加强各行业的网络安全措施方面已变得至关重要。本系统综述旨在综合当前关于CTI策略在减轻网络攻击有效性的文献，确定用于威胁检测和预防的最有效工具和方法，并突出当前方法的局限性。按照PRISMA指南对学术数据库进行了广泛搜索，共纳入43项相关研究。这一数字反映了基于明确的纳入、排除和质量标准进行的严格筛选过程，并且与网络威胁情报领域类似系统综述的范围一致。该综述得出结论，虽然CTI显著提高了预测和预防网络威胁的能力，但数据标准化、隐私问题以及组织间信任等挑战依然存在。它还强调了通过利用先进技术的整合和创建强化协作框架来持续改进CTI实践的必要性。这些进展对于形成能够应对不断演变的威胁态势的强大且适应性强的网络安全态势至关重要，最终为所有行业营造更安全的数字环境。总体而言，该综述对CTI的当前状态提供了实际思考，并提出了加强和提高CTI有效性的未来研究方向。
