A new form of intelligence work in the era of big data - Internet Open Source Intelligence (1)

1. What is intelligence?

Early intelligence mostly refers to secret intelligence, serving military activities, in order to win wars and maintain national security. With the development of science and technology and the deepening of social practice, the concept of intelligence is constantly evolving and enriching, the connotation is gradually clear, and the extension is gradually expanding. For example, many modern interpretations of intelligence are made from the aspects of philology, archives, library science, etc., which are extended and expanded concepts. In fact, the most intuitive and simple explanation of the word "intelligence" is: intelligence is the key information needed to solve a specific problem.

2. What is open source intelligence?

United Stated Congress, NATO, Open Source Solutions Academy, U.S. Department of Defense, U.S. Director of National Intelligence and other institutions and individuals have clearly described open source intelligence. In a nutshell, open source intelligence refers to intelligence obtained from public sources and obtained legally.

With the development of science and the popularization of Internet technology, the methods of open source intelligence collection have been expanded in electronic media, and Internet Open Source Intelligence has also begun to take shape. Internet Open Source Intelligence (INOSINT) is based on clear and specific needs, based on public data resources, through legal and compliance means, comprehensive various types of massive data, using advanced processing technology, conducting professional intelligence research and judgment, and mining and refining useful information. The intuitive explanation is: Gain intelligence from publicly available data in cyberspace.

Throughout the world, open source intelligence has been widely used in maintaining national security, supporting military operations, ensuring law enforcement operations, serving teaching and scientific research, supporting business competition, supporting disaster relief, and participating in social governance. Developed countries represented by the United States attach great importance to the research and application of open source intelligence. The relevant theories have become more complete, and the actual intelligence work has turned to open source intelligence. Sherman Kent, the "father of intelligence analysis" in the United States, once said that about 80% of the intelligence used by the intelligence community every day comes from open sources, and Allen W. Dulles, the longest-serving director of the CIA, also publicly recognized this view. According to CIA statistics in 2007, open source intelligence accounted for more than 80% of the total intelligence collection.

In the Internet age, open-source intelligence has a large quantity, rapid generation, wide access channels, and strong timeliness, which are completely incomparable to traditional intelligence. This has also greatly improved the value and status of open source intelligence, and at the same time, the research on open source intelligence has also introduced a new direction - Internet Open Source Intelligence.

The US CIA has established the Center For Cyber Intelligence (CCI) and the Center for Cyber Intelligence Research (CCIR). The British Broadcasting Corporation also has a department called BBC Monitoring, which is responsible for monitoring foreign media around the world, and also uses open source intelligence, especially open source network intelligence, as the main monitoring method. All these show that the Internet has become the world's largest source of open source intelligence data, and the acquisition of intelligence has entered the era of open source network intelligence.

3. What are the characteristics of open source cyber intelligence?

First, the data sources of open source cyber intelligence are relatively wide. It not only covers traditional public media, such as public speeches, public broadcasts, etc., but also includes Internet-specific media, such as social media platforms, emails, online media, major websites, surveillance cameras, communities and other domestic and foreign data sources. It covers almost all fields and industries, and can be used as the "starting point" and "entrance" of another intelligence topic at any time to guide intelligence personnel to discover clues and conduct "full information source" collection and analysis. At the same time, the characteristics of comprehensiveness and stability of open source intelligence are convenient for tracking the changes of the target for long-term monitoring. Comparing the intelligence services of many companies and research institutions in recent years, it is found that using open source network intelligence as the main data source can meet most of the needs of users. Such as research on competitors' technical conditions, business dynamic tracking, management, organization, research and development, and application status research of related equipment and technologies, industry operating cost composition and low-cost strategy analysis, new technology research and development and application status and trends, etc. .

Secondly, the input cost is relatively small. Experts believe that compared with other intelligence, the economic cost of open source network intelligence is lower, with less investment and greater returns. Therefore, for those countries with insufficient intelligence work budgets, open source network intelligence can be used to replace traditional secret intelligence to a certain extent. In addition, traditional intelligence work requires professionals to collect intelligence, and the cost is relatively high. Using Wikipedia and other mechanisms such as Web2.0 can mobilize all personnel in the organization and those interested in the topic in the society to collect intelligence together, greatly reducing costs.

Furthermore, the security risk of open source cyber intelligence is low. For enterprises and social organizations, open source network intelligence can avoid the risks of illegal or moral violations that may exist in other intelligence work. For nations, open source cyber intelligence can avoid the diplomatic wrangling that other types of intelligence work often spark. Since the information comes from the open Internet, there are not too many restrictions and obstacles in the process of collection, analysis, and transmission. Open source intelligence does not involve confidential information, and all work is carried out through legal and compliant means. From information acquisition to intelligence use, the security risks at all stages are relatively low.

Finally, the concealment of open source network intelligence is relatively high. Open source cyber intelligence can protect one's own strategic intent. Traditional intelligence work often requires the use of various manual or technical means to spy on the other party's system. Once the other party finds the trace, the other party can infer its own intentions based on the intelligence search content. However, open source network intelligence work can be carried out under private conditions, making it impossible for the other party to detect and infer their intentions.