Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization. Which of the following sharing platforms should be used by Kim?

Blueliv's Threat Exchange Network is a collaborative platform specifically designed for sharing threat intelligence among a community of security professionals. It allows analysts like Kim to gather threat data from numerous sources, share their own findings, and use the collective intelligence to inform and enhance their organization's security policies and posture. This directly matches the requirements described in the scenario.

A. Cuckoo Sandbox is a tool for automated malware analysis. It generates intelligence on specific samples but is not a platform for sharing intelligence from varied external sources.
B. OmniPeek is a network protocol analyzer used for deep packet inspection and network troubleshooting, not a threat intelligence sharing platform.
C. PortDroid is a network analysis application for Android devices, intended for local network scanning and diagnostics, not large-scale intelligence exchange.

1. Tounsi, W., & Rais, H. (2018). A survey on technical threat intelligence in the age of sophisticated-attacks. Computers & Security, 72, 212-233. https://doi.org/10.1016/j.cose.2017.09.001. This paper surveys various threat intelligence types and platforms, categorizing tools and distinguishing between analysis tools (like sandboxes) and sharing platforms.

2. Liao, X., et al. (2016). Acing the IOC Game: A Privacy-Preserving Approach to Cyber-Threat Intelligence Sharing. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (pp. 441-452). https://doi.org/10.1145/2976749.2978372. This research discusses the architecture and purpose of threat intelligence sharing platforms, which aligns with the function of the Blueliv network.