2017/02/02 by Aziz Mohaisen, Mohaisen, Aziz, Omar Al-Ibrahim +9 · 2 citations
Computer Science · #Blockchain Technology Applications and Security #Cryptography and Data Security #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Privacy-Preserving Technologies in Data #cs.CR
paper · pdf · doi:10.48550/arxiv.1702.00548
arxiv created 2017/02/02 · openalex publication_date 2017/02/02 · arxiv updated 2017/02/03 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
In the past decade, the information security and threat landscape has grown significantly making it difficult for a single defender to defend against all attacks at the same time. This called for introduc- ing information sharing, a paradigm in which threat indicators are shared in a community of trust to facilitate defenses. Standards for representation, exchange, and consumption of indicators are pro- posed in the literature, although various issues are undermined. In this paper, we rethink information sharing for actionable intelli- gence, by highlighting various issues that deserve further explo- ration. We argue that information sharing can benefit from well- defined use models, threat models, well-understood risk by mea- surement and robust scoring, well-understood and preserved pri- vacy and quality of indicators and robust mechanism to avoid free riding behavior of selfish agent. We call for using the differential nature of data and community structures for optimizing sharing.