Planned maintenance
A system upgrade is planned for 24/9-2024, at 12:00-14:00. During this time DiVA will be unavailable.
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
A shared cyber threat intelligence solution for smes
Leiden University, NLD.
KPMG Somekh Chaikin, ISR.
KPMG Somekh Chaikin, ISR.
KPMG Somekh Chaikin, ISR.
Show others and affiliations
2021 (English)In: Electronics, E-ISSN 2079-9292, Vol. 10, no 23, article id 2913Article in journal (Refereed) Published
Abstract [en]

Small-and medium-sized enterprises (SMEs) frequently experience cyberattacks, but often do not have the means to counter these attacks. Therefore, cybersecurity researchers and practitioners need to aid SMEs in their defence against cyber threats. Research has shown that SMEs require solutions that are automated and adapted to their context. In recent years, we have seen a surge in initiatives to share cyber threat intelligence (CTI) to improve collective cybersecurity resilience. Shared CTI has the potential to answer the SME call for automated and adaptable solutions. Sadly, as we demonstrate in this paper, current shared intelligence approaches scarcely address SME needs. We must investigate how shared CTI can be used to improve SME cybersecurity resilience. In this paper, we tackle this challenge using a systematic review to discover current state-of-the-art approaches to using shared CTI. We find that threat intelligence sharing platforms such as MISP have the potential to address SME needs, provided that the shared intelligence is turned into actionable insights. Based on this observation, we developed a prototype application that processes MISP data automatically, prioritises cybersecurity threats for SMEs, and provides SMEs with actionable recommendations tailored to their context. Subsequent evaluations in operational environments will help to improve our application, such that SMEs are enabled to thwart cyberattacks in future. © 2021 by the authors. Licensee MDPI, Basel, Switzerland.

Place, publisher, year, edition, pages
MDPI , 2021. Vol. 10, no 23, article id 2913
Keywords [en]
Cyber threat intelligence, Cybersecurity, Information sharing, MISP, SME
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:bth-22608DOI: 10.3390/electronics10232913Scopus ID: 2-s2.0-85119677844OAI: oai:DiVA.org:bth-22608DiVA, id: diva2:1637058
Funder
EU, Horizon 2020, 883588
Note

A correction to this paper has been published:

DOI: 10.3390/electronics11030349

Available from: 2022-02-11 Created: 2022-02-11 Last updated: 2023-11-14Bibliographically approved

Open Access in DiVA

fulltext(1930 kB)618 downloads
File information
File name FULLTEXT01.pdfFile size 1930 kBChecksum SHA-512
ed2fa47aba2463ff1e22c2a9f1288ce086c2c3c6000dfafe773323eb3c6e16581aa39083b3aed3f0fcfc2d12b33978d3b427ea8386e80529f3bd373cc520de76
Type fulltextMimetype application/pdf

Other links

Publisher's full textScopus

Authority records

Fricker, Samuel

Search in DiVA

By author/editor
Fricker, Samuel
By organisation
Department of Software Engineering
In the same journal
Electronics
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar
Total: 618 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 306 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf