A Blockchain-Based Framework for Scalable and Trustless Delegation of Cyber Threat Intelligence

No Thumbnail Available
File version
Author(s)
Dunnett, K
Pal, S
Jadidi, Z
Jurdak, R
Griffith University Author(s)
Primary Supervisor
Other Supervisors
Editor(s)
Date
2023
Size
File type(s)
Location

Dubai, United Arab Emirates

License
Abstract

CTI sharing is increasingly used by organisations to strengthen security. The sensitivity of CTI has led to research on trust-based sharing, yet most existing CTI sharing approaches only support static trust-based decisions or centralised trust evaluation, limiting their scalability and lead to centralised risk. This paper proposes a blockchain-based CTI sharing framework that relies on trustless delegates for dynamic trust-based decision-making and decentralised trust evaluation. To facilitate trustless delegation, our proposal allows CTI producers to intentionally inject false data on a periodic basis into the system to audit the behaviour of delegates. Moreover, unlike existing approaches, delegates within our framework facilitate sharing of CTI directly with consumers such that scalable CTI sharing occurs. The results of a qualitative evaluation of the proposed framework's security show that it is resilient to common privacy and trust concerns. Moreover, a quantitative evaluation of a proof-of-concept prototype using Ethereum show that the proposed framework is scalable and cost-effective.

Journal Title
Conference Title

2023 IEEE International Conference on Blockchain and Cryptocurrency (ICBC)

Book Title
Edition
Volume
Issue
Thesis Type
Degree Program
School
Publisher link
Patent number
Funder(s)
Grant identifier(s)
Rights Statement
Rights Statement
Item Access Status
Note
Access the data
Related item(s)
Subject

Cybersecurity and privacy

Persistent link to this record
Citation

Dunnett, K; Pal, S; Jadidi, Z; Jurdak, R, A Blockchain-Based Framework for Scalable and Trustless Delegation of Cyber Threat Intelligence, 2023 IEEE International Conference on Blockchain and Cryptocurrency (ICBC), 2023