Abstract: A method of refining cyber threat intelligence data, comprising: sending a first version of a threat list to a first cyber threat intelligence source and to a second cyber threat intelligence source; obtaining original first cyber threat intelligence data from the first source; obtaining original second cyber threat intelligence data from the second source; creating a second version of the threat list based on at least the original first cyber threat intelligence data and the original second cyber threat intelligence data; sending the second version of the threat list to the first source and to the second source; obtaining new first cyber threat intelligence data from the first source; obtaining new second cyber threat intelligence data from the second source; and creating a third version of the threat list based on at least the new first cyber threat intelligence data and the new second cyber threat intelligence data.

Abstract: A method of refining cyber threat intelligence data, comprising: sending a first version of a threat list to a first cyber threat intelligence source and to a second cyber threat intelligence source; obtaining original first cyber threat intelligence data from the first source; obtaining original second cyber threat intelligence data from the second source; creating a second version of the threat list based on at least the original first cyber threat intelligence data and the original second cyber threat intelligence data; sending the second version of the threat list to the first source and to the second source; obtaining new first cyber threat intelligence data from the first source; obtaining new second cyber threat intelligence data from the second source; and creating a third version of the threat list based on at least the new first cyber threat intelligence data and the new second cyber threat intelligence data.

Abstract: An IEEE 802.11 security system for monitoring wireless networks with a view to detecting and locating unauthorized or threatening IEEE 802.11 devices entering a user's wireless network environment or a facility not intended to support wireless networks is disclosed. The security system comprises a network appliance subsystem and a portable computing subsystem with data means to interface between the two systems. Optionally, counter-measuring means for launching neutralizing and/or disabling counter-measures against a suspected device upon activation can be incorporated into the security system. A method of operation of the IEEE 802.11 security system is also disclosed.