DEALER: decentralized incentives for threat intelligence reporting and exchange

Abstract

The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken into account in the exchange process. However, existing exchange platforms neither offer incentives to participate in the exchange process, nor fulfill requirements resulting from reporting obligations. With this work, we present a decentralized platform for the exchange of threat intelligence information. The platform supports the fulfillment of legal reporting obligations for security incidents and provides additional incentives for information exchange between the parties involved. We evaluate the platform by implementing it based on the EOS blockchain and IPFS distributed hash table. The prototype and cost measurements demonstrate the feasibility and cost-efficiency of our concept.

A survey of application research based on blockchain smart contract

“…In order to solve the trouble that sensitive data is easily tampered with or leaked by hackers or cloud internal managers due to centralized access control mechanism in cloud, Yang et al [ 135 ] put forward an access control framework for privacy protection based on blockchain (AuthPrivacyChain), which is based on EOS local test network and uses smart contract to achieve the settings such as transaction, encryption and access control permission, but the efficiency and performance of system needing to be strengthened. To solve the problem that the existing trading platform lacks the reporting of threat intelligence information and the incentive of trading process, Florian et al [ 136 ] proposed a completely decentralized CTI sharing model and a trading platform based on EOS blockchain and IPFS DHT, which uses smart contract to achieve the incentive mechanism and the reporting function, but the performance does not reach the expected effect owing to the EOS technology is not mature enough, and private security needs to be increased. Carreno [ 137 ] developed an IoT expert system for smart city construction by using smart contract and neural network based on EOSIO ecosystem, which the operation rules of system are set through smart contract that the data interaction between the system and sensors is realized, but there are still some deviations in the realization of function.…”

“…The fairness of lottery transaction [129] Intelligent logistics platform [130] EOSIO data acquisition framework [131] Role based Extensible Access Control [132] EOSIO smart contract vulnerability detection [133] IoT expert system for smart city [137] Incentive mechanism [136] Access control framework in Cloud [135] Personal data security sharing scheme [134] Fig. 16 Overview of research on blockchain-based smart contract…”

A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective

“…Statistics: Information about the RE&CT incident response format can be retrieved from the RE&CT 9 GitHub repository, the RE&CT documentation and the ATC project 10 .…”

“…Extensive research on CTI has defined its essential building blocks to comprise the threat information itself [3], [4], data formats [5], [6], [7], sharing and collaboration via dedicated platforms [8], [9], [10] as well as incident response [11], [12], all embraced by the topic of data quality [13], [14].…”

A Blockchain-Enabled Incentivised Framework for Cyber Threat Intelligence Sharing in ICS

“…In [14], the authors proposed a CTI-sharing application prototype implemented on a public blockchain platform. It facilitated the fulfilment of legal reporting obligations and provided positive token-based incentives for reciprocated engagement in the CTI exchange.…”