Interoperability Challenges in the Cybersecurity Information Sharing Ecosystem
Open accessAbstract
Threat intelligence helps businesses and organisations make the right decisions in their fight against cyber threats, and strategically design their digital defences for an optimised and up-to-date security situation. Combined with advanced security analysis, threat intelligence helps reduce the time between the detection of an attack and its containment. This is achieved by continuously providing information, accompanied by data, on existing and emerging cyber threats and vulnerabilities affecting corporate networks. This paper addresses challenges that organisations are bound to face when they decide to invest in effective and interoperable cybersecurity information sharing and categorises them in a layered model. Based on this, it provides an evaluation of existing sources that share cybersecurity information. The aim of this research is to help organisations improve their cyber threat information exchange capabilities, to enhance their security posture and be more prepared against emerging threats.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Many legacy systems are built to prohibit compatibility with the applications of other manufacturers in order to protect market share and encourage hospital or clinic chain purchases.
“As an extra, many of these systems are built to prohibit compatibility with the applications of other manufacturers in order to protect market share and encourage hospital or clinic chain purchases [37].”
From Interoperability of heterogeneous health information systems: a systematic literature review (2023) · cites this paper as [37]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
A survey on technical threat intelligence in the age of sophisticated cyber attacks
Tounsi, W., & Rais, H. (2018) · Computers & Security · doi:10.1016/j.cose.2017.09.001 · Cited by 474 · see citing works
The Intrusion Detection Message Exchange Format (IDMEF)
Debar, H., Curry, D., & Feinstein, B. (2007) · doi:10.17487/rfc4765 · Cited by 336 · see citing works
Guide to Cyber Threat Information Sharing
Johnson, C. S., Badger, M. L., Waltermire, D., Snyder, J., & Skorupka, C. (2016) · doi:10.6028/nist.sp.800-150 · Cited by 293 · see citing works
Skopik, F., Settanni, G., & Fiedler, R. (2016) · Computers & Security · doi:10.1016/j.cose.2016.04.003 · Cited by 246 · see citing works
Popa, O. (2016) · European Taxation · doi:10.59403/1v8s9t8 · Cited by 230 · see citing works
Taxonomy Model for Cyber Threat Intelligence Information Exchange Technologies
Burger, E., Goodman, M. D., Kampanakis, P., & Zhu, K. A. (2014) · doi:10.1145/2663876.2663883 · Cited by 139 · see citing works
Rutkowski, A., Kadobayashi, Y., Furey, I., et al. (2010) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1880153.1880163 · Cited by 65 · see citing works
A Quantitative Evaluation of Trust in the Quality of Cyber Threat Intelligence Sources
Schaberreiter, T., Kupfersberger, V., Rantos, K., et al. (2019) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3339252.3342112 · Cited by 64 · see citing works
Self-citationBishop, M., Bhumiratana, B., Crawford, R., et al. (2005) · IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE) · doi:10.1109/enabl.2004.36 · Cited by 24 · see citing works
The Incident Object Description Exchange Format Version 2
Danyliw, R. (2016) · doi:10.17487/rfc7970 · Cited by 24 · see citing works
A System Architecture of Cybersecurity Information Exchange with Privacy (CYBEX-P)
Sadique, F., Bakhshaliyev, K., Springer, J., & Sengupta, S. (2019) · IEEE Annual Computing and Communication Workshop and Conference (CCWC) · doi:10.1109/ccwc.2019.8666600 · Cited by 14 · see citing works
Resource-Oriented Lightweight Information Exchange (ROLIE)
Field, J., Banghart, S., & Waltermire, D. (2018) · doi:10.17487/rfc8322 · Cited by 6 · see citing works
Definition of ROLIE CSIRT Extension
Field, J. P., & Banghart, S. (2019) · Cited by 3 · see citing works
Incident Object Description Exchange Format Usage Guidance
Kampanakis, P., & Suzuki, M. (2017) · doi:10.17487/rfc8274 · Cited by 3 · see citing works
Definition of the ROLIE Vulnerability Extension
Banghart, S. (2019) · Cited by 1 · see citing works
Flagged first, then by citations
Research works printed but not linked: 1
- European Parliament and Council. Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Off. J. Eur. Union L 2016, 119, 1-88. Available online: http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32016R0679 (accessed on 3 March 2020).
Cited by
Sorted by citations
Interoperability of heterogeneous health information systems: a systematic literature review
Torab-Miandoab, A., Samad-Soltani, T., Jodati, A., & Rezaei-Hachesu, P. (2023) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-023-02115-5 · Cited by 393 · see citing works
- Authors
- Rantos, K., Spyros, A., Papanikolaou, A., Kritsas, A., Ilioudis, C., & Katos, V.
- Affiliations
- International Hellenic University (GR)
- Innovative Secure Technologies, 60 Monastiriou, 546 27 Thessaloniki, Greece
- Bournemouth University (GB)
- Corresponding author
- Rantos, Konstantinos
- ORCID
- Venue
- Computers
- Publisher
- MDPI AG
- Published
- 2020-03-06
- Volume
- 9
- Issue
- 1
- Pages
- 18
- ISSN
- 2073-431X (ISSN-L)
- OpenAlex
- W3010555539
- Cited by
- 69
- References
- 15
- Citations by year
- 2026: 8 · 2025: 16 · 2024: 9 · 2023: 15 · 2022: 7 · 2021: 8 · 2020: 6
- FWCI
- 8.47
- Type
- journal article
- Language
- en
- Open access
- gold
- dx.doi.org
- Licence
- Locations
- Computers (publishedVersion, cc-by)
- Bournemouth University Research Online (Bournemouth University) (acceptedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Zenodo (CERN European Organization for Nuclear Research) (submittedVersion, cc-by)
- Funders
- Horizon 2020 (740723)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
- Keywords
- cybersecurity information sharing, interoperability, threat intelligence, security posture
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
