Information-Centric Automation and Orchestration White Paper

Many products designed to perform advanced analytics or automate analysis of cyber threat information separate the data normalization and information standardization functions from the automated workflows and analytics engines. This way they are working on information in a specific, defined, and understood context, allowing them to add, modify, and delete sources and analytics without impacting existing core functionality. In essence, they have deployed an Information-Focused Automation Framework for the organization. The intent of deploying this type of framework is to enable information-centric automation. Information-centric automation emphasizes developing workflows and analytics based on standardized pieces of information made accessible by local resources instead of inconsistent data provided by products and services. This framework provides information management functionality that is explicitly designed to enable automation.