Data Mining for Efficient Collaborative Information Discovery
Bronwyn Woods, Samuel J. Perl, Brian Lindauer · 2015
The cybersecurity community expends considerable effort on establishing protocols, data formats, and coordination centers for sharing operational security information. There is widespread agreement that sharing information should create value, but also that it is far from simple for one organization to use intelligence provided to it by another. Substantial work focuses on engineering ontologies and data formats to resolve syntactic, and to some extent semantic, differences. These solutions aim to create high quality low noise shared data resources, but require substantial commitments in technology, man hours, and inter-organizational relationship building. Such expenditures may be beyond the reach of many organizations, especially since a substantial portion of the resulting shared data will remain unused.