Recently water treatment facilities (WTF) equipped their cyber physical system (CPS) with latest mechanism which make the system capable for superior assistant for the water treatment operations. On the other hand, this mechanism has drawbacks which make the WTF CPS porn to cyber physical assaults. So, proactive cyber defense method is required for protecting WTF CPS from cyber-attacks. For this purpose, cyber threat intelligence (CTI) is a valuable resource for designing effective defense systems for WTF CPS. Latest threat information is perpetually accommodated by CTI which play pivotal role for architect and deploy security initiatives and alleviation policies. CTI collection from different sources and validation is important for ensuring the quality of CTI. CTI from external sources may contain fake CTI. In this paper we proposed a CTI gathering framework for WTF CPS combining both active and passive sources. We also designed a validation and scoring algorithm for those gathered CTI.
