DEALER: decentralized incentives for threat intelligence reporting and exchange
| Autor: | Günther Pernul, Florian Menges, Benedikt Putz |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
ddc:004
Computer Networks and Communications Process (engineering) Computer science 0211 other engineering and technologies Cryptography 02 engineering and technology Distributed hash table 0202 electrical engineering electronic engineering information engineering Safety Risk Reliability and Quality Computer communication networks Information exchange 021110 strategic defence & security studies business.industry ddc:330 330 Wirtschaft 020206 networking & telecommunications 004 Informatik Threat intelligence sharing Blockchain Smart contract Threat intelligence Incentive Risk analysis (engineering) Work (electrical) business Software Information Systems |
| DOI: | 10.5283/epub.44302 |
| Popis: | The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken into account in the exchange process. However, existing exchange platforms neither offer incentives to participate in the exchange process, nor fulfill requirements resulting from reporting obligations. With this work, we present a decentralized platform for the exchange of threat intelligence information. The platform supports the fulfillment of legal reporting obligations for security incidents and provides additional incentives for information exchange between the parties involved. We evaluate the platform by implementing it based on the EOS blockchain and IPFS distributed hash table. The prototype and cost measurements demonstrate the feasibility and cost-efficiency of our concept. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|