Application of Block Chain Technology in Constructing Network Threat Intelligence System
Shichang Xuan, Hao Tang, Wei Wang, Wu Yang · 2020
At present, the threat situation in cyberspace is more and more serious, and there are many attack methods in cyberspace. It is urgent to build a healthy and efficient cyber threat intelligence ecosystem. At the same time, strengthening the cooperation and mutual assistance of various information systems and creating a widely Shared and fully interconnected information sharing environment can maximize the value of threat intelligence and improve the capabilities of threat detection and emergency response of all parties. However, it is easy for many researchers and organizations to conduct intelligence collection in their own way to form information islands, which limits the active flow of information among organizations. In recent years, block chain has attracted extensive attention in the field of distributed records and immutable transactions. In this paper, a network threat intelligence sharing platform based on block chain technology is built based on the characteristics of block chain. Through our experiments, the network threat intelligence system based on block chain technology proposed in this paper can collect more diversified and larger quantities of network data under the condition of ensuring security and privacy, and improve the efficiency of sharing network threat intelligence data across organizations.