| Project Description/Objective: | In the context of the development towards a more intensive exchange of information on current or potential threats between companies and authorities, a very heterogeneous, still growing market of so-called Threat Intelligence Sharing Platforms has formed in recent years. These are Internet-based platforms for the cross-organizational exchange of threat information. Threat Intelligence Sharing Platforms support the collection of data from different sources, their aggregation and cooperative evaluation as well as the export of the analysis data into IT systems of companies, authorities and universities. The aim of the project is to develop and apply a tool for describing and comparing Threat Intelligence Sharing Platforms. In particular, the following research questions are to be answered: - Which criteria can be used to describe, evaluate and compare Threat Intelligence Sharing Platforms?
- What are standard functions, typical interfaces or standard formats for data exchange on the platforms?
- Where are the differences - what special functionalities do individual platforms offer?
|
|---|
| Publications: | Sauerwein, Clemens; Fischer, Daniel; Rubsamen, Milena; Rosenberger, Guido; Stelzer, Dirk; Breu, Ruth;From Threat Data to Actionable Intelligence: An Exploratory Analysis of the Intelligence Cycle Implementation in Cyber Threat Intelligence Sharing Platforms. - In: ARES 2021 : 16th International Conference on Availability, Reliability and Security, August 17 - August 20, 2021, (2021), https://doi.org/10.1145/3465481.3470048 Bauer, Sara; Fischer, Daniel; Sauerwein, Clemens; Latzel, Simon; Stelzer, Dirk; Breu, Ruth;Towards an evaluation framework for threat intelligence sharing platforms. - In: Hawaii International Conference on System Sciences 2020. - Honolulu, Hawaii : ScholarSpace, (2020), pp. 1947-1956, https://doi.org/10.24251/HICSS.2020.239 Amthor, Peter; Fischer, Daniel; Kühnhauser, Winfried; Stelzer, Dirk;Automated cyber threat sensing and responding: integrating threat intelligence into security-policy-controlled systems. - In: ARES 2019 : 14th International Conference on Availability, Reliability and Security, August 26 - August 29, 2019, Canterbury, UK.. - New York, NY : The Association for Computing Machinery, (2019), article no. 86, 10 pages, https://doi.org/10.1145/3339252.3340509 |
|---|
