Publicação
An architecture for sharing cyberiIntelligence based on blockchain
| Resumo: | Cyber-intelligence sharing can leverage the development and deployment of security plans and teams within organizations, making infrastructures resilient and resistant to cyberattacks. To be efficient, information sharing should be performed in a trusted environment, ensuring both the integrity, privacy and confidentiality and the truthfulness and usefulness of the information. This paper addresses this issue with the development and deployment of an architecture based on blockchain technology. Each participant is granted a reputation level, that is used to assess and verify the information other actors produce. Each actor, then, is given an amount of credit, corresponding to the number and accuracy of the validation. Information is also organized in topics, instantiated in independent ledgers. The architecture was validated with a three organization scenario, for proof-of-concept. |
|---|---|
| Autores principais: | Gonçalo, Rui |
| Outros Autores: | Pedrosa, Tiago; Lopes, Rui Pedro |
| Assunto: | Blockchain Hyperledger fabric Cybersecurity Intelligence sharing |
| Ano: | 2020 |
| País: | Portugal |
| Tipo de documento: | comunicação em conferência |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Instituto Politécnico de Bragança |
| Idioma: | inglês |
| Origem: | Biblioteca Digital do IPB |
| Resumo: | Cyber-intelligence sharing can leverage the development and deployment of security plans and teams within organizations, making infrastructures resilient and resistant to cyberattacks. To be efficient, information sharing should be performed in a trusted environment, ensuring both the integrity, privacy and confidentiality and the truthfulness and usefulness of the information. This paper addresses this issue with the development and deployment of an architecture based on blockchain technology. Each participant is granted a reputation level, that is used to assess and verify the information other actors produce. Each actor, then, is given an amount of credit, corresponding to the number and accuracy of the validation. Information is also organized in topics, instantiated in independent ledgers. The architecture was validated with a three organization scenario, for proof-of-concept. |
|---|