A Blockchain-Based Incentive Mechanism for Sharing Cyber Threat Intelligence

Ma, Xiaoqi; Dong-sheng, YU; Du, Yixuan; Li, Lanting; Wen, Ning; Lv, Haibin

doi:10.3390/electronics12112454

Cited by 3 publications

(2 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Ma et al [37] propose a CTI sharing mechanism based on blockchain, applying game theory principles and smart contracts. Their approach is designed to motivate and promote active participation in CTI sharing, mitigate free-riding behavior among participants, and enhance enthusiasm and efficiency in the sharing process.…”

Section: Public Blockchainsmentioning

confidence: 99%

Cyber Threat Intelligence on Blockchain: A Systematic Literature Review

Chatziamanetoglou,

Rantos

2024

Computers

View full text Add to dashboard Cite

Cyber Threat Intelligence (CTI) has become increasingly important in safeguarding organizations against cyber threats. However, managing, storing, analyzing, and sharing vast and sensitive threat intelligence data is a challenge. Blockchain technology, with its robust and tamper-resistant properties, offers a promising solution to address these challenges. This systematic literature review explores the recent advancements and emerging trends at the intersection of CTI and blockchain technology. We reviewed research papers published during the last 5 years to investigate the various proposals, methodologies, models, and implementations related to the distributed ledger technology and how this technology can be used to collect, store, analyze, and share CTI in a secured and controlled manner, as well as how this combination can further support additional dimensions such as quality assurance, reputation, and trust. Our findings highlight the focus of the CTI and blockchain convergence on the dissemination phase in the CTI lifecycle, reflecting a substantial emphasis on optimizing the efficacy of communication and sharing mechanisms, based on an equitable emphasis on both permissioned, private blockchains and permissionless, public blockchains, addressing the diverse requirements and preferences within the CTI community. The analysis reveals a focus towards the tactical and technical dimensions of CTI, compared to the operational and strategic CTI levels, indicating an emphasis on more technical-oriented utilization within the domain of blockchain technology. The technological landscape supporting CTI and blockchain integration emerges as multifaceted, featuring pivotal roles played by smart contracts, machine learning, federated learning, consensus algorithms, IPFS, deep learning, and encryption. This integration of diverse technologies contributes to the robustness and adaptability of the proposed frameworks. Moreover, our exploration unveils the overarching significance of trust and privacy as predominant themes, underscoring their pivotal roles in shaping the landscape within our research realm. Additionally, our study addresses the maturity assessment of these integrated systems. The approach taken in evaluating maturity levels, distributed across the Technology Readiness Level (TRL) scale, reveals an average balance, indicating that research efforts span from early to mid-stages of maturity in implementation. This study signifies the ongoing evolution and maturation of research endeavors within the dynamic intersection of CTI and blockchain technology, identifies trends, and also highlights research gaps that can potentially be addressed by future research on the field.

show abstract

Section: Public Blockchainsmentioning

confidence: 99%

Cyber Threat Intelligence on Blockchain: A Systematic Literature Review

Chatziamanetoglou,

Rantos

2024

Computers

View full text Add to dashboard Cite

show abstract

“…In Ref. [107], Ma, Yu, Du, Li, Ni, and Lv suggest an incentive system for exchanging cyber threat intelligence based on blockchain technology. By promoting cooperation and information exchange amongst stakeholders, this method seeks to strengthen group cybersecurity defenses in an environment lacking in trust.…”

Section: Literature Reviewmentioning

confidence: 99%

A Novel Authentication Scheme Based on Verifiable Credentials Using Digital Identity in the Context of Web 3.0

Nita,

Mihailescu

2024

Electronics

View full text Add to dashboard Cite

This paper explores the concept of digital identity in the evolving landscape of Web 3.0, focusing on the development and implications of a novel authentication scheme using verifiable credentials. The background sets the stage by placing digital identity within the broad context of Web 3.0′s decentralized, blockchain-based internet, highlighting the transition from earlier web paradigms. The methods section outlines the theoretical framework and technologies employed, such as blockchain, smart contracts, and cryptographic algorithms. The results summarize the main findings, including the proposed authentication scheme’s ability to enhance user control, security, and privacy in digital interactions. Finally, the conclusions discuss the broader implications of this scheme for future online transactions and digital identity management, emphasizing the shift towards self-sovereignty and reduced reliance on centralized authorities.

show abstract

Blockchain-Based Model for Incentivized Cyber Threat Intelligence Sharing

Venčkauskas,

Jusas,

Barisas

et al. 2024

Applied Sciences

View full text Add to dashboard Cite

Sharing cyber threat intelligence (CTI) can significantly improve the security of information technology (IT) in organizations. However, stakeholders and practitioners are not keen on sharing CTI data due to the risk of exposing their private data and possibly losing value as an organization on the market. We present a model for CTI data sharing that maintains trust and confidentiality and incentivizes the sharing process. The novelty of the proposed model is that it combines two incentive mechanisms: money and reputation. The reputation incentive is important for ensuring trust in the shared CTI data. The monetary incentive is important for motivating the sharing and consumption of CTI data. The incentives are based on a subscription fee and a reward score for activities performed by a user. User activities are considered in the following three fields: producing CTI data, consuming CTI data, and reviewing CTI data. Each instance of user activity is rewarded with a score, and this score generates some value for reputation. An algorithm is proposed for assigning reward scores and for recording the accumulated reputation of the user. This model is implemented on the Hyperledger Fabric blockchain and the Interplanetary File System for storing data off-chain. The implemented prototype demonstrates the feasibility of the proposed model. The provided simulation shows that the selected values and the proposed algorithm used to calculate the reward scores are in accordance with economic laws.

show abstract

A Blockchain-Based Incentive Mechanism for Sharing Cyber Threat Intelligence

Cited by 3 publications

References 25 publications

Cyber Threat Intelligence on Blockchain: A Systematic Literature Review

Cyber Threat Intelligence on Blockchain: A Systematic Literature Review

A Novel Authentication Scheme Based on Verifiable Credentials Using Digital Identity in the Context of Web 3.0

Blockchain-Based Model for Incentivized Cyber Threat Intelligence Sharing

Contact Info

Product

Resources

About