IDEAS home Printed from https://ideas.repec.org/h/spr/isochp/978-3-031-30191-9_4.html
   My bibliography  Save this book chapter

Next Generation ISACs: Simulating Crowdsourced Intelligence for Faster Incident Response

In: Cyberdefense

Author

Listed:
  • Philipp Fischer

    (Swiss Federal Institute of Technology Zurich)

  • Sébastien Gillard

    (Military Academy at the Swiss Federal Institute of Technology Zurich)

Abstract

We uncover the different patterns by which users on the open source intelligence platforms ThreatFox and MISP share information. We let these patterns inform a simulation model that describes how decentral users share indicators of compromise (IoC). The results suggest that both platform approaches have unique strenghts and drawbacks, and they highlight a trade-off between the speed with which IoC are shared and the reputational risk involved with this sharing. We find that single-community platforms such as ThreatFox let agents share low-value IoC fast, whereas closed-user communities such as MISP create conditions that enable users to share high-value IoC. We discuss the extent to which a combination of both designs may prove to be effective.

Suggested Citation

  • Philipp Fischer & Sébastien Gillard, 2023. "Next Generation ISACs: Simulating Crowdsourced Intelligence for Faster Incident Response," International Series in Operations Research & Management Science, in: Marcus Matthias Keupp (ed.), Cyberdefense, chapter 0, pages 49-66, Springer.
    • Handle: RePEc:spr:isochp:978-3-031-30191-9_4
    DOI: 10.1007/978-3-031-30191-9_4
    as

    Download full text from publisher

    To our knowledge, this item is not available for download. To find whether it is available, there are three options:
    1. Check below whether another version of this item is available online.
    2. Check on the provider's web page whether it is in fact available.
    3. Perform a search for a similarly titled item that would be available.

    More about this item

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:isochp:978-3-031-30191-9_4. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.