Legal Issues Related to Cyber Threat Information Sharing Among Private Entities for Critical Infrastructure Protection

Nweke, Livinus Obiora; Wolthusen, Stephen D.

doi:10.23919/cycon49761.2020.9131721

Cited by 24 publications

(18 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Already, we have observed that organisational measures are very essential for enhancing CIP. To this end, we studied the legal issues related to cyber threat information (CTI) sharing among private entities for CIP in [19]. This is because CTI sharing has been proposed as an efficient and effective method for improving CIP.…”

Section: Discussionmentioning

confidence: 99%

A Holistic Approach for Enhancing Critical Infrastructure Protection: Research Agenda

Nweke

Wolthusen

2021

International Conference on Emerging Applications and Technologies for Industry 4.0 (EATI’2020)

Self Cite

View full text Add to dashboard Cite

Critical infrastructure is an asset or a system that is essential for the maintenance of vital societal functions. The protection of such an infrastructure requires more than a technical understanding of the underlying issues; it also needs an understanding of the organisational aspects. Although there are several standards and guidelines for the protection of critical infrastructure, they are usually vague and do not offer practical solutions. In this paper, we describe a 'work in progress' holistic approach for enhancing critical infrastructure protection. First, we introduce the theoretical background of this study. Then, based on this theoretical foundation, we propose a holistic approach which takes into account both organisational and technical measures. In addition, we provide a synopsis of our research outcomes so far and our ongoing work towards enhancing critical infrastructure protection.

show abstract

Section: Discussionmentioning

confidence: 99%

A Holistic Approach for Enhancing Critical Infrastructure Protection: Research Agenda

Nweke

Wolthusen

2021

International Conference on Emerging Applications and Technologies for Industry 4.0 (EATI’2020)

Self Cite

View full text Add to dashboard Cite

show abstract

“…A key theme which has been identified is that one of the challenges to solving CTI sharing is the establishment of a trust relationship between those entering a sharing relationship. Trusted relationships can take a long time to build and constant effort to sustain, i.e., they are hard to gain, and easy to lose [25]. Additinally, such relationships are difficult to build for untrusted participants [38].…”

Section: Barriers To Cti Sharingmentioning

confidence: 99%

Practical Cyber Threat Intelligence in the UK Energy Sector

Paice

McKeown

2023

Springer Proceedings in Complexity

View full text Add to dashboard Cite

The UK energy sector is a prime target for cyber-attacks by foreign states, criminals, 'hacktivist' groups and terrorists. As Critical National Infrastructure (CNI), the industry needs to understand the threats it faces to mitigate risks and make efficient use of limited resources. Cyber Threat Intelligence (CTI) sharing is one means of achieving this, by leveraging sector wide knowledge to combat ongoing mutual threats. However, being unable to segregate intelligence or to control what is disseminated to which parties, and by which means, has impeded industry cooperation thus far. The purpose of this study is to investigate the barriers to sharing and to add to the body of knowledge of CTI in the UK energy sector, while providing some level of assurance that existing tooling is fit for purpose. We achieve these aims by conducting a multivocal literature review and by experimentation using a simulated Malware Information Sharing Platform (MISP) community in a virtual environment. This work demonstrates that trust can be placed in the open-source MISP platform, with the caveat that the sharing models and tooling limitations are understood, while also taking care to create appropriate deployment taxonomies and sharing rules. It is hoped that some of the identified barriers are partially alleviated, helping to lay the foundations for a UK Energy sector CTI sharing community.

show abstract

“…Survey [10], highlights a number of legal and regulatory obligations that organisation in certain countries must meet. For example, in Germany Internet Protocol (IP) addresses are considered personal information and therefore any disclosure of CTI containing them must comply with German privacy laws [23]. However, in the UK IP addresses are not considered personal information and therefore can be freely shared.…”

Section: Legal and Regulatory Obligationsmentioning

confidence: 99%

Challenges and Opportunities of Blockchain for Cyber Threat Intelligence Sharing

Dunnett¹,

Pal²,

Jadidi³

2022

Preprint

View full text Add to dashboard Cite

The emergence of the Internet of Things (IoT) technology has caused a powerful transition in the cyber threat landscape. As a result, organisations have had to find new ways to better manage the risks associated with their infrastructure. In response, a significant amount of research has focused on developing efficient Cyber Threat Intelligence (CTI) sharing platforms. However, most existing solutions are highly centralised and do not provide a way to exchange information in a distributed way. In this chapter, we subsequently seek to evaluate how blockchain technology can be used to address a number of limitations present in existing CTI sharing platforms. To determine the role of blockchain-based sharing moving forward, we present a number of general CTI sharing challenges, and discuss how blockchain can bring opportunities to address these challenges in a secure and efficient manner. Finally, we discuss a list of relevant works and note some unique future research questions.

show abstract

Legal Issues Related to Cyber Threat Information Sharing Among Private Entities for Critical Infrastructure Protection

Cited by 24 publications

References 2 publications

A Holistic Approach for Enhancing Critical Infrastructure Protection: Research Agenda

A Holistic Approach for Enhancing Critical Infrastructure Protection: Research Agenda

Practical Cyber Threat Intelligence in the UK Energy Sector

Challenges and Opportunities of Blockchain for Cyber Threat Intelligence Sharing

Contact Info

Product

Resources

About