The NTT Security Global Threat Intelligence Center (GTIC) protects, informs and educates NTT Security clients through the following activities:
GTIC goes above and beyond the traditional pure research organization, by taking its threat and vulnerability research and combining it with its detective technologies development to produce actionable threat intelligence. Its mission is to protect and provide NTT Security clients with the services and tools to prevent and provide early warning notifications of risks and threats 24/7.
Threat research is focused on gaining understanding and insight into the various threat actors, exploit tools and malware – and the techniques, tactics, and procedures (TTP) used by attackers.
Vulnerability research pre-emptively uncovers zero-day vulnerabilities that are likely to become the newest attack vector, while ensuring full understanding of published vulnerabilities.
Detective technologies development focuses on how new approaches to discovering attacks (heuristic, big data, complex event processing, and machine-learning analysis) can be developed. It also ensures that the rules and capabilities of the current Global Services Platform (GSP) are fully utilized.
Threat intelligence management is where it all comes together. GTIC continually monitors the global threat landscape for new and emerging threats in the wild; works to understand and analyze those threats using advanced analysis techniques and proprietary tools; and publishes and curates them using the Global Threat Intelligence Platform (GTIP).
Finally, GTIC communicates its research and findings to customers using threat advisories, annual, quarterly, and detailed monthly security threat reports containing technical information, as well as recent and long-term security trends, to forecast and understand threats.