Direkt zum Inhalt

Owner only: item control page
Reittinger, Tobias ; Grill, Johannes ; Pernul, Günther

Share and benefit: incentives for cyber threat intelligence sharing

Reittinger, Tobias , Grill, Johannes and Pernul, Günther (2026) Share and benefit: incentives for cyber threat intelligence sharing. International Journal of Information Security 25 (1).

Date of publication of this fulltext: 27 Jan 2026 06:21
Article
DOI to cite this document: 10.5283/epub.78507


Abstract

Cyber threat intelligence (CTI) provides actionable insights into the threat landscape, helping organizations strengthen their defenses. Because commercial CTI is costly, inter-organizational sharing can reduce expenses, yet adoption remains limited. Still, the design of effective incentives for CTI sharing and their embedding in a sharing platform remains underexplored. We conducted 15 ...

Cyber threat intelligence (CTI) provides actionable insights into the threat landscape, helping organizations strengthen their defenses. Because commercial CTI is costly, inter-organizational sharing can reduce expenses, yet adoption remains limited. Still, the design of effective incentives for CTI sharing and their embedding in a sharing platform remains underexplored. We conducted 15 semi-structured interviews with security professionals to elicit incentive requirements and design options. We find that organizations prefer to share CTI with known recipients to build trust and support GDPR compliance. They also value mechanisms that lower coordination costs, such as a reputation system and price guidance to help prioritize scarce analyst time. Further, a major barrier is skepticism about the net benefits of sharing. To address this, we propose financial compensation for contributed CTI and a marketing label that signals proactive cybersecurity to partners and customers. We implemented these incentives in a platform prototype and assessed their effects in 14 hands-on sessions with security experts. Participants reported increased willingness to share, suggesting that well-designed incentives can catalyze CTI-sharing ecosystems. Put simply, organizations can share and benefit.



Involved Institutions


Details

Item typeArticle
Journal or Publication TitleInternational Journal of Information Security
Publisher:Springer
Open Access Type:DEAL (Springer)
Volume:25
Number of Issue or Book Chapter:1
Date22 January 2026
InstitutionsBusiness, Economics and Information Systems > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)
Informatics and Data Science > Department Information Systems > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)
Projects
Funded by: Bundesministerium für Bildung und Forschung (BMBF) (16KIS1568K)
Identification Number
ValueType
10.1007/s10207-025-01165-2DOI
Dewey Decimal Classification000 Computer science, information & general works > 004 Computer science
300 Social sciences > 330 Economics
StatusPublished
RefereedYes, this version has been refereed
Created at the University of RegensburgYes
URN of the UB Regensburgurn:nbn:de:bvb:355-epub-785071
Item ID78507

Export bibliographical data

Owner only: item control page

nach oben