| Title | Privacy-preserving and Trusted Threat Intelligence Sharing using Distributed Ledgers |
| Publication Type | Conference Paper |
| Year of Publication | 2021 |
| Authors | Ali, Hisham, Papadopoulos, Pavlos, Ahmad, Jawad, Pitropakis, Nikolaos, Jaroucheh, Zakwan, Buchanan, William J. |
| Conference Name | 2021 14th International Conference on Security of Information and Networks (SIN) |
| Date Published | dec |
| Keywords | blockchain, composability, computer security, Cyber Hunting, distributed ledger, Ecosystems, Human Behavior, Hyperledger Fabric, information sharing, InterPlanetary File System, Metrics, MITRE ATT&ck, Organizations, Privacy-preserving, pubcrawl, resilience, Resiliency, Scalability, Secure File Sharing, smart contracts, Threat Information Sharing |
| Abstract | Threat information sharing is considered as one of the proactive defensive approaches for enhancing the over-all security of trusted partners. Trusted partner organizations can provide access to past and current cybersecurity threats for reducing the risk of a potential cyberattack--the requirements for threat information sharing range from simplistic sharing of documents to threat intelligence sharing. Therefore, the storage and sharing of highly sensitive threat information raises considerable concerns regarding constructing a secure, trusted threat information exchange infrastructure. Establishing a trusted ecosystem for threat sharing will promote the validity, security, anonymity, scalability, latency efficiency, and traceability of the stored information that protects it from unauthorized disclosure. This paper proposes a system that ensures the security principles mentioned above by utilizing a distributed ledger technology that provides secure decentralized operations through smart contracts and provides a privacy-preserving ecosystem for threat information storage and sharing regarding the MITRE ATT&CK framework. |
| DOI | 10.1109/SIN54109.2021.9699366 |
| Citation Key | ali_privacy-preserving_2021 |
Privacy-preserving and Trusted Threat Intelligence Sharing using Distributed Ledgers