From Cyber Security Information Sharing to Threat Management

Brown, Sarah S.; Gommers, Joep; Serrano, Oscar Serrano

doi:10.1145/2808128.2808133

Cited by 74 publications

(36 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…For this the psychological and technological barriers to participate should be low (R1,R16). In the study of Brown et al [42], the technological and organizational challenges of sharing cyber security information are presented and requirements from the community are summarized for a possible solution. The key challenges they mentioned for building such systems are: working with multiple information sources, combining, determining and enriching data and the allocation of the information into organizational workflows and technological products (R14).…”

Section: Approaches From Literature Reviewmentioning

confidence: 99%

“…In summary, profit is seen for the individual players in the network by having the opportunity to access data which otherwise would not be in their scope [2][3][4][5]. Particularly in the case of specific CNs like supply chains, it was found that information sharing and coordination helps to reduce the bullwhip effect and the supply chain costs [31,32,42]. Therefore, DLT could enable innovative business models as well as new quality of collaboration in business networks.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Distributed Ledger Technology for the systematic Investigation and Reduction of Information Asymmetry in Collaborative Networks

Schinle

Erler

Stork

2020

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

Costs, risks and inefficiencies in CollaborativeNetworks (CNs) resulting from information asymmetries have been discussed in the scientific community for years. In this work, supply chain networks, as common representative of CNs, are used as object of investigation. Therein, problems and requirements of interorganizational information exchange are elaborated as well as the potential role Distributed Ledger Technology (DLT) could play to address them. As major challenge, convincing all relevant network partners to resolve asymmetric information by sharing sensitive data is identified. To face this issue, the value of shared information is prioritized as a motivational aspect. Finally, we propose a search process to systematically assess the benefits of information sharing in collaborative networks. To coordinate and implement this process regarding the derived requirements of CNs we propose system components based on DLT design patterns.

show abstract

Section: Approaches From Literature Reviewmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Distributed Ledger Technology for the systematic Investigation and Reduction of Information Asymmetry in Collaborative Networks

Schinle

Erler

Stork

2020

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

show abstract

“…A growing number of researchers argue that security threat intelligence programs are becoming a fundamental component of an organization's broader security agenda [20,23,24]. McMillan summarizes security threat intelligence as evidence-based knowledge about threats, which can be used to make informed security decisions within an organization [22].…”

Section: Related Workmentioning

confidence: 99%

“…However, this team can also contribute to an organization's security threat intelligence program by conducting detailed investigations, identifying root-causes associated with security events and incidents and producing actionable information [13]. This actionable information can include rogue IP addresses, malware metadata, and indicators of compromise [13,20]. This information can also be of interest to regional and national Computer Emergency Response Teams [21,27].…”

Section: Related Workmentioning

confidence: 99%

How Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations

Grispos¹,

Glisson

Storer

2019

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

An increasing number of cybersecurity incidents prompts organizations to explore alternative security solutions, such as threat intelligence programs. For such programs to succeed, data needs to be collected, validated, and recorded in relevant datastores. One potential source supplying these datastores is an organization's security incident response team. However, researchers have argued that these teams focus more on eradication and recovery and less on providing feedback to enhance organizational security. This prompts the idea that data collected during security incident investigations may be of insufficient quality for threat intelligence analysis.While previous discussions focus on data quality issues from threat intelligence sharing perspectives, minimal research examines the data generated during incident response investigations. This paper presents the results of a case study identifying data quality challenges in a Fortune 500 organization's incident response team. Furthermore, the paper provides the foundation for future research regarding data quality concerns in security incident response.

show abstract

“…Shodan scans open ports such as HTTP, FTP, and TELNET through the handshake process (Brown et al 2015;Lee et al 2017;Serrano et al 2014). The device information is identified by analyzing with keywords contained in the banner.…”

Section: Scan Technology For Internet Devicesmentioning

confidence: 99%

Management platform of threats information in IoT environment

Kim

2017

J Ambient Intell Human Comput

View full text Add to dashboard Cite

From Cyber Security Information Sharing to Threat Management

Cited by 74 publications

References 8 publications

Distributed Ledger Technology for the systematic Investigation and Reduction of Information Asymmetry in Collaborative Networks

Distributed Ledger Technology for the systematic Investigation and Reduction of Information Asymmetry in Collaborative Networks

How Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations

Management platform of threats information in IoT environment

Contact Info

Product

Resources

About