| Title | Enabling Cyber Security Data Sharing for Large-scale Enterprises Using Managed Security Services |
| Publication Type | Conference Paper |
| Year of Publication | 2018 |
| Authors | Wang, X., Herwono, I., Cerbo, F. D., Kearney, P., Shackleton, M. |
| Conference Name | 2018 IEEE Conference on Communications and Network Security (CNS) |
| Date Published | May 2018 |
| Publisher | IEEE |
| ISBN Number | 978-1-5386-4586-4 |
| Keywords | Architecture, business data processing, cloud service, Collaboration, collaborative data sharing, component, computer security, confidential data sharing, cyber security, cyber security data sharing, cyber security information, cybercrimes, data anonymization, data encryption, data privacy, Data Sanitization, data sharing, Design, diagram, flexible data sharing, information, Lakes, large-scale enterprise, large-scale enterprises, managed security service, managed security service provider, managed security services, Monitoring, MSS platform customers, MSSP, multi-tenant, organization, outsourcing, Peer-to-peer computing, platform solution, policy, policy-based governance, Portals, privacy, privacy concerns, private sectors, pubcrawl, public sectors, security of data, Security Policies Analysis, Task Analysis, use case |
| Abstract | Large enterprises and organizations from both private and public sectors typically outsource a platform solution, as part of the Managed Security Services (MSSs), from 3rd party providers (MSSPs) to monitor and analyze their data containing cyber security information. Sharing such data among these large entities is believed to improve their effectiveness and efficiency at tackling cybercrimes, via improved analytics and insights. However, MSS platform customers currently are not able or not willing to share data among themselves because of multiple reasons, including privacy and confidentiality concerns, even when they are using the same MSS platform. Therefore any proposed mechanism or technique to address such a challenge need to ensure that sharing is achieved in a secure and controlled way. In this paper, we propose a new architecture and use case driven designs to enable confidential, flexible and collaborative data sharing among such organizations using the same MSS platform. MSS platform is a complex environment where different stakeholders, including authorized MSSP personnel and customers' own users, have access to the same platform but with different types of rights and tasks. Hence we make every effort to improve the usability of the platform supporting sharing while keeping the existing rights and tasks intact. As an innovative and pioneering attempt to address the challenge of data sharing in the MSS platform, we hope to encourage further work to follow so that confidential and collaborative sharing eventually happens among MSS platform customers. |
| URL | https://ieeexplore.ieee.org/document/8433212 |
| DOI | 10.1109/CNS.2018.8433212 |
| Citation Key | wang_enabling_2018 |
Enabling Cyber Security Data Sharing for Large-scale Enterprises Using Managed Security Services