Article ; Online: On the Performance of Secure Sharing of Classified Threat Intelligence between Multiple Entities.
2023 Volume 23, Issue 2
Abstract: The sharing of cyberthreat information within a community or group of entities is possible due to solutions such as the Malware Information Sharing Platform (MISP). However, the MISP was considered limited if its information was deemed as classified or ... ...
| Abstract | The sharing of cyberthreat information within a community or group of entities is possible due to solutions such as the Malware Information Sharing Platform (MISP). However, the MISP was considered limited if its information was deemed as classified or shared only for a given period of time. A solution using searchable encryption techniques that better control the sharing of information was previously proposed by the same authors. This paper describes a prototype implementation for two key functionalities of the previous solution, considering multiple entities sharing information with each other: the symmetric key generation of a sharing group and the functionality to update a shared index. Moreover, these functionalities are evaluated regarding their performance, and enhancements are proposed to improve the performance of the implementation regarding its execution time. As the main result, the duration of the update process was shortened from around 2922 s to around 302 s, when considering a shared index with 100,000 elements. From the security analysis performed, the implementation can be considered secure, thus confirming the secrecy of the exchanged nonces. The limitations of the current implementation are depicted, and future work is pointed out. |
|---|---|
| MeSH term(s) | Computer Security ; Algorithms ; Confidentiality ; Information Dissemination |
| Language | English |
| Publishing date | 2023-01-12 |
| Publishing country | Switzerland |
| Document type | Journal Article |
| ZDB-ID | 2052857-7 |
| ISSN | 1424-8220 ; 1424-8220 |
| ISSN (online) | 1424-8220 |
| ISSN | 1424-8220 |
| DOI | 10.3390/s23020914 |
| Database | MEDical Literature Analysis and Retrieval System OnLINE |
More links
Kategorien
Order via subito
This service is chargeable due to the Delivery terms set by subito. Orders including an article and supplementary material will be classified as separate orders. In these cases, fees will be demanded for each order.