Uncovering Critical Resources and Factors Influencing the Use of Threat Intelligence Sharing Platforms

Abstract

Threat intelligence sharing is an effective security control to develop situational awareness of the rapidly growing number of new, increasingly sophisticated and targeted cyber threats. This collaborative practice involves the sharing of valuable data, information and knowledge about emerging threats, vulnerabilities and attack patterns between organisations and authorities to strengthen overall security. Although this is a promising solution, there has been limited research focused on understanding the critical resources and factors that influence the use of threat intelligence sharing platforms. To address this research gap, we conducted a systematic literature review by analysing 34 papers. In doing so, we identified 9 benefits and 14 challenges regarding the use of threat intelligence sharing platforms. Based on them we derived three critical resources and four influential factors on the use of threat intelligence sharing and discussed their relationships.