Dynamic threat intelligence detection and control system

A method, comprising:

• by a computing platform comprising at least one processor, memory, and a communication interface:
• receiving, by the at least one processor and via the communication interface, a plurality of threat intelligence data feeds from a plurality of sources, each threat intelligence data feed of the plurality of intelligence feeds including intelligence indicating a potential security compromise and each intelligence feed being received from a respective source associated with an entity;
• performing, by the at least one processor, a first evaluation process on the plurality of threat intelligence data feeds, the first evaluation process including comparing first data in a first threat intelligence data feed to data in other threat intelligence data feeds to identify similarities between the first data in the first threat intelligence data feed and other data in the other threat intelligence data feeds;
• based on the first evaluation process, generating, by the at least one processor, a first evaluation process output, the first evaluation process output including a score for each threat intelligence data feed based on the identified similarities;
• performing, by the at least one processor, a second evaluation process on the plurality of threat intelligence data feeds, the second evaluation process including mapping interdependency of the first threat intelligence data feed to another threat intelligence data feed based on timeliness of data within the first threat intelligence data feed;
• based on the second evaluation process, generating, by the at least one processor, a second evaluation process output, the second evaluation process output including a score for each threat intelligence data feed based on the mapped interdependencies;
• performing, by the at least one processor, a third evaluation process on the plurality of threat intelligence data feeds, the third evaluation process including topic modeling using at least one topic modeling technique and based on one or more processing parameters identified for evaluation;
• based on the third evaluation process, generating, by the at least one processor, a third evaluation process output, the third evaluation process output including a score indicating a similarity between the one or more processing parameters identified for evaluation and the topic modeling;
• and
• based on the generated first evaluation process output, second evaluation output and third evaluation output, ranking, by the at least one processor, the plurality of threat intelligence data feeds to identify entities providing valuable threat intelligence data.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

• receive a plurality of threat intelligence data feeds from a plurality of sources, each threat intelligence data feed of the plurality of intelligence feeds including intelligence indicating a potential security compromise and each intelligence feed being received from a respective source associated with an entity;
• perform a first evaluation process on the plurality of threat intelligence data feeds, the first evaluation process including comparing first data in a first threat intelligence data feed to data in other threat intelligence data feeds to identify similarities between the first data in the first threat intelligence data feed and other data in the other threat intelligence data feeds;
• based on the first evaluation process, generate a first evaluation process output, the first evaluation process output including a score for each threat intelligence data feed based on the identified similarities;
• perform a second evaluation process on the plurality of threat intelligence data feeds, the second evaluation process including mapping interdependency of the first threat intelligence data feed to another threat intelligence data feed based on timeliness of data within the first threat intelligence data feed;
• based on the second evaluation process, generate a second evaluation process output, the second evaluation process output including a score for each threat intelligence data feed based on the mapped interdependencies;
• perform a third evaluation process on the plurality of threat intelligence data feeds, the third evaluation process including topic modeling using at least one topic modeling technique and based on one or more processing parameters identified for evaluation;
• based on the third evaluation process, generate a third evaluation process output, the third evaluation process output including a score indicating a similarity between the one or more processing parameters identified for evaluation and the topic modeling;
• and
• based on the generated first evaluation process output, second evaluation output and third evaluation output, ranking the plurality of threat intelligence data feeds to identify entities providing valuable threat intelligence data.