Towards a Functional and Trustful Web-based Information Sharing Center

摘要

As the underlying infrastructure of the Internet becomes more advanced and high-speed Internet access becomes more prevalent, the usage of web-based applications increases. Web applications provide users with a wide range of services, and providing a platform for sharing cyber security information is one of those. Studies have shown cyber actors mostly utilize the same techniques, tactics and procedures (TTPs) to attack different companies and platforms. Therefore, sharing threat data, best practices and countermeasures can help every participant in the sharing process to identify potential threats, mitigate their impacts or prevent far-reaching attacks from happening. Establishing a web-based information sharing center have been proved to be beneficial as a communication channel for assisting firms and organizations to promote their own cyber or physical security. Accordingly, in this paper we look at information sharing challenges and different trust models; we also present required technical methods, policies and regulations to overcome the introduced challenges by carefully studying established rules and regulations in the U.S. and European Union. The proposed technical methods, policies and regulations are beneficial for implementing a trustful web-based information sharing center. Finally, future work is outlined.