Abstract
The new generation of cyber threat attacks has gradually shifted to APT attacks. The attack technology is complex and changeable. The sharing of threat intelligence can improve network defense capabilities. However, privacy issues, trust issues, and sharing mechanisms make the sharing process inefficient. The characteristics of decentralization, anonymity, and non-tamperability are suitable for solving problems in threat intelligence sharing. In this paper, we propose a new threat intelligence sharing model based on the alliance chain in blockchain technology: CITAShare, which includes a distributed architecture database, and the update of data relies on the consensus algorithm. We build the model to implement the process of sharing threat intelligence through smart contracts and solved the privacy issues in the sharing process consequently. Additionally, we find that current intelligence sharing platforms often lack an effective incentive mechanism, so we propose a profit distribution method based on improved Shapley value to motivate the sharers. Our scheme guaranteed rationality in the operational perspective by using the smart contract in the specific distribution process.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Tounsi, W., Rais, H.: A survey on technical threat intelligence in the age of sophisticated cyber attacks. Comput. Secur. 72, 212–233 (2018)
Amofa, S., et al.: A blockchain-based architecture framework for secure sharing of personal health data, pp. 1–6 (2018)
Liu, X., Wang, Z., Jin, C., Li, F., Li, G.: A blockchain-based medical data sharing and protection scheme. IEEE Access 7, 118943–118953 (2019)
Homan, D., Shiel, I., Thorpe, C.: A new network model for cyber threat intelligence sharing using blockchain technology, pp. 1–6 (2019)
Vakilinia, I., Tosh, D.K., Sengupta, S.: Privacy-preserving cybersecurity information exchange mechanism, pp. 1–7 (2017)
Xiao, Z., et al.: EMRSHare: a cross-organizational medical data sharing and management framework using permissioned blockchain, pp. 998–1003 (2018)
Makhdoom, I., Zhou, I., Abolhasan, M., Lipman, J., Ni, W.: PrivySharing: a blockchain-based framework for privacy-preserving and secure data sharing in smart cities. Comput. Secur. 88, 101653 (2020)
Javaid, U., Aman, M.N., Sikdar, B.: DrivMan: driving trust management and data sharing in vanets with blockchain and smart contracts, pp. 1–5 (2019)
Rawat, D.B., Njilla, L., Kwiat, K., Kamhoua, C.: iShare: blockchain-based privacy-aware multi-agent information sharing games for cyber-security. In: 2018 International Conference on Computing, Networking and Communications (ICNC) (2018)
Zhu, L., Dong, H., Shen, M., Gai, K.: An incentive mechanism using shapley value for blockchain-based medical data sharing (2019)
Xu, Z., Peng, Z., Yang, L., Chen, X.: An improved shapley value method for a green supply chain income distribution mechanism. Int. J. Environ. Res. Public Health 15, 1976 (2018). https://doi.org/10.3390/ijerph15091976
Rutkowski, A., et al.: CYBEX: the cybersecurity information exchange framework (x.1500) 40, 59–64 (2010)
Azaria, A., Ekblaw, A., Vieira, T., Lippman, A.: MedRec: using blockchain for medical data access and permission management. In: 2016 2nd International Conference on Open and Big Data (OBD), pp. 25–30 (2016)
Gai, K., Wu, Y., Zhu, L., Qiu, M., Shen, M.: Privacy-preserving energy trading using consortium blockchain in smart grid. IEEE Trans. Ind. Inf. 15, 3548–3558 (2019)
Pham, H., Le, T., Pham, T., Nguyen, H., Le, T.: Enhanced security of IoT data sharing management by smart contracts and blockchain, pp. 398–403 (2019)
Kassem, J.A., Sayeed, S., Marcogisbert, H., Pervez, Z., Dahal, K.: DNS-IDM: a blockchain identity management system to secure personal data sharing in a network. Appl. Sci. 9, 2953 (2019)
Ølnes, S., Ubacht, J., Janssen, M.: Blockchain in government: benefits and implications of distributed ledger technology for information sharing. Gov. Inf. Q. 34, 355–364 (2017)
Acknowledgment
We are grateful to thank our anonymous reviewers for their insightful comments. This work is supported by National Key Research and Development Project (2018YFB0804701), National Natural Science Foundation of China (No. U1836210, No. 61572460).
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Shi, H. et al. (2022). Threat Intelligence Sharing Model and Profit Distribution Based on Blockchain and Smart Contracts. In: Liu, Q., Liu, X., Chen, B., Zhang, Y., Peng, J. (eds) Proceedings of the 11th International Conference on Computer Engineering and Networks. Lecture Notes in Electrical Engineering, vol 808. Springer, Singapore. https://doi.org/10.1007/978-981-16-6554-7_70
Download citation
DOI: https://doi.org/10.1007/978-981-16-6554-7_70
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-16-6553-0
Online ISBN: 978-981-16-6554-7
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)