A Cyber Threat Intelligence Sharing Scheme Based on Consortium Blockchain in the Energy Industry

Cyber threat intelligence sharing enhances situational awareness among stakeholders and is crucial for safeguarding key energy assets. In view of the problems of intelligence tampering, uneven intelligence quality and lack of incentives in the current threat intelligence sharing scheme, we proposed a cyber threat intelligence sharing scheme for the energy industry based on the consortium chain. In this scheme, the energy industry deployed distributed honeynet to actively trap valuable threat intelligence information and then shared it. Firstly, the server stored encrypted threat intelligence, the private chain stored ciphertext hash values, and the consortium chain stored encrypted keywords to ensure the security and privacy of threat intelligence. Secondly, we set up the validator sharing subject to evaluate the level of cyber threat intelligence and set an incentive strategy. Then, we implemented secure search for keywords based on searchable encryption and secure intelligence sharing based on proxy re-encryption. Finally, we perform a security and privacy protection analysis of the proposed scheme, and the results demonstrate that it outperforms existing intelligence sharing schemes in both performance and privacy protection effectiveness.