Loading [MathJax]/extensions/MathMenu.js
A Trusted, Verifiable and Differential Cyber Threat Intelligence Sharing Framework using Blockchain | IEEE Conference Publication | IEEE Xplore

A Trusted, Verifiable and Differential Cyber Threat Intelligence Sharing Framework using Blockchain


Abstract:

Cyber Threat Intelligence (CTI) is the knowledge of cyber and physical threats that help mitigate potential cyber attacks. The rapid evolution of the current threat lands...Show More

Abstract:

Cyber Threat Intelligence (CTI) is the knowledge of cyber and physical threats that help mitigate potential cyber attacks. The rapid evolution of the current threat landscape has seen many organisations share CTI to strengthen their security posture for mutual benefit. However, in many cases, CTI data contains attributes (e.g., software versions) that have the potential to leak sensitive information or cause reputational damage to the sharing organisation. While current approaches allow restricting CTI sharing to trusted organisations, they lack solutions where the shared data can be verified and disseminated ‘differentially’ (i.e., selective information sharing) with policies and metrics flexibly defined by an organisation. In this paper, we propose a blockchain-based CTI sharing framework that allows organisations to share sensitive CTI data in a trusted, verifiable and differential manner. We discuss the limitations associated with existing approaches and highlight the advantages of the proposed CTI sharing framework. We further present a detailed proof of concept using the Ethereum blockchain network. Our experimental results show that the proposed framework can facilitate the exchange of CTI without creating significant additional overheads.
Date of Conference: 09-11 December 2022
Date Added to IEEE Xplore: 20 March 2023
ISBN Information:

ISSN Information:

Conference Location: Wuhan, China

Funding Agency:


References

References is not available for this document.