Sorry, you need to enable JavaScript to visit this website.

QoI: Assessing Participation in Threat Information Sharing

Citation Author(s):
Jeman Park, Hisham Alasmary, Omar Al-Ibrahim, Charles Kamhoua, Kevin Kwiat, Laurent Njilla, Aziz Mohaisen
Submitted by:
Jeman Park
Last updated:
19 April 2018 - 1:10pm
Document Type:
Presentation Slides
Document Year:
2018
Event:
Presenters:
Jeman Park
Paper Code:
SS-L14.4
 

We introduce the notion of Quality of Indicator (QoI) to assess the level of contribution by participants in threat intelligence sharing. We exemplify QoI by metrics of the correctness, relevance, utility, and uniqueness of indicators. We build a system that extrapolates the metrics using a machine learning process over a reference set of indicators. We compared these results against a model that only considers the volume of information as a metric for contribution, and unveiled various observations, including the ability to spot low-quality contributions that are synonymous to free-riding.

up
0 users have voted: