Towards an Evaluation Framework for Threat Intelligence Sharing Platforms

Simple item page
dc.contributor.authorBauer, Sara
dc.contributor.authorFischer, Daniel
dc.contributor.authorSauerwein, Clemens
dc.contributor.authorLatzel, Simon
dc.contributor.authorStelzer, Dirk
dc.contributor.authorBreu, Ruth
dc.date.accessioned2020-01-04T07:32:58Z
dc.date.available2020-01-04T07:32:58Z
dc.date.issued2020-01-07
dc.description.abstractThreat intelligence sharing is an important countermeasure against the increasing number of security threats to which companies and governments are exposed. Its objective is the cross-organizational exchange of information about actual and potential threats. In recent years, a heterogeneous market of threat intelligence sharing platforms (TISPs) has emerged. These platforms are inter-organizational systems that support collaborative collection, aggregation, analysis and dissemination of threat-related information. Organizations that consider using TISPs are often faced with the challenge of selecting suitable platforms. To facilitate the evaluation of threat intelligence sharing platforms, we present a framework for analyzing and comparing relevant TISPs. Our framework provides a set of 25 functional and non-functional criteria that support potential users in selecting suitable platforms. We demonstrate the applicability of our evaluation framework by assessing three platforms: MISP, OTX and ThreatQ. We describe common features and differences between the three platforms.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2020.239
dc.identifier.isbn978-0-9981331-3-3
dc.identifier.urihttp://hdl.handle.net/10125/63978
dc.language.isoeng
dc.relation.ispartofProceedings of the 53rd Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCybersecurity and Privacy in Government
dc.subjectevaluation framework
dc.subjectinformation security
dc.subjectsecurity information sharing
dc.subjectthreat intelligence sharing
dc.subjectthreat intelligence sharing platform
dc.titleTowards an Evaluation Framework for Threat Intelligence Sharing Platforms
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0193.pdf
Size:
272.73 KB
Format:
Adobe Portable Document Format
Download

Collections

Cybersecurity and Privacy in Government