Towards an anonymity supported platform for shared cyber threat intelligence

Abstract

Over the last few years, cyber defense strategies in large organizations have gradually shifted from being reactive to being increasingly pro-active. In the latter mode threats are anticipated and corresponding mitigations are actionable. An essential component of this strategy is the ability to share threat intelligence from multiple sources ranging from crowd sourcing to closed circles of trusted stakeholders and their supply chains. This paper presents a collaborative platform that supports sharing of cyber threat intelligence in which anonymity is a key component. The component has been compared to existing threat intelligence sharing solutions. The design of the component is examined and a prototype of the supporting tool has been implemented.