Menges, Florian and Putz, Benedikt and Pernul, Gunther (2020) DEALER: decentralized incentives for threat intelligence reporting and exchange. INTERNATIONAL JOURNAL OF INFORMATION SECURITY. ISSN 1615-5262, 1615-5270
Full text not available from this repository. (Request a copy)Abstract
The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken into account in the exchange process. However, existing exchange platforms neither offer incentives to participate in the exchange process, nor fulfill requirements resulting from reporting obligations. With this work, we present a decentralized platform for the exchange of threat intelligence information. The platform supports the fulfillment of legal reporting obligations for security incidents and provides additional incentives for information exchange between the parties involved. We evaluate the platform by implementing it based on the EOS blockchain and IPFS distributed hash table. The prototype and cost measurements demonstrate the feasibility and cost-efficiency of our concept.
| Item Type: | Article |
|---|---|
| Uncontrolled Keywords: | Threat intelligence sharing; Blockchain; Smart contract |
| Subjects: | 000 Computer science, information & general works > 004 Computer science 300 Social sciences > 330 Economics |
| Divisions: | Business, Economics and Information Systems > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul) |
| Depositing User: | Petra Gürster |
| Date Deposited: | 21 Apr 2021 13:46 |
| Last Modified: | 21 Apr 2021 13:46 |
| URI: | https://pred.uni-regensburg.de/id/eprint/43156 |
Actions (login required)
 |
View Item |
