Direkt zum Inhalt

Menges, Florian ; Putz, Benedikt ; Pernul, Günther

DEALER: decentralized incentives for threat intelligence reporting and exchange

Menges, Florian , Putz, Benedikt und Pernul, Günther (2020) DEALER: decentralized incentives for threat intelligence reporting and exchange. International Journal of Information Security 2021 (5), S. 741-761.

Veröffentlichungsdatum dieses Volltextes: 17 Dez 2020 06:38
Artikel
DOI zum Zitieren dieses Dokuments: 10.5283/epub.44302


Zusammenfassung

The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken ...

The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken into account in the exchange process. However, existing exchange platforms neither offer incentives to participate in the exchange process, nor fulfill requirements resulting from reporting obligations. With this work, we present a decentralized platform for the exchange of threat intelligence information. The platform supports the fulfillment of legal reporting obligations for security incidents and provides additional incentives for information exchange between the parties involved. We evaluate the platform by implementing it based on the EOS blockchain and IPFS distributed hash table. The prototype and cost measurements demonstrate the feasibility and cost-efficiency of our concept.



Beteiligte Einrichtungen


Details

DokumentenartArtikel
Titel eines Journals oder einer ZeitschriftInternational Journal of Information Security
Verlag:Springer
Ort der Veröffentlichung:NEW YORK
Band:2021
Nummer des Zeitschriftenheftes oder des Kapitels:5
Seitenbereich:S. 741-761
Datum9 Dezember 2020
InstitutionenWirtschaftswissenschaften > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)
Informatik und Data Science > Fachbereich Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)
Identifikationsnummer
WertTyp
10.1007/s10207-020-00528-1DOI
Stichwörter / KeywordsThreat intelligence sharing; Blockchain; Smart contract
Dewey-Dezimal-Klassifikation000 Informatik, Informationswissenschaft, allgemeine Werke > 004 Informatik
300 Sozialwissenschaften > 330 Wirtschaft
StatusVeröffentlicht
BegutachtetJa, diese Version wurde begutachtet
An der Universität Regensburg entstandenJa
URN der UB Regensburgurn:nbn:de:bvb:355-epub-443023
Dokumenten-ID44302

Bibliographische Daten exportieren

Nur für Besitzer und Autoren: Kontrollseite des Eintrags

nach oben