IoT System Cyber Threat Information Sharing Method (IoT 시스템을 대상으로 한 침해사고 위협 정보 공유 방법)

Lee, Hyung Woo (이형우)

doi:10.20465/KIOTS.2023.9.5.101

IoT System Cyber Threat Information Sharing Method

Journal of Internet of Things and Convergence
Abbr : JKIOTS
2023, 9(5), pp.101-107
DOI : 10.20465/KIOTS.2023.9.5.101
Publisher : The Korea Internet of Things Society
Research Area : Engineering > Computer Science > Internet Information Processing
Received : August 26, 2023
Accepted : October 3, 2023
Published : October 31, 2023

Lee, Hyung Woo ¹

¹한신대학교

Accredited

ABSTRACT

In order to proactively respond to increasingly intelligent and sophisticated cyber-attacks targeting heterogeneous IoT systems, there is a need for techniques that efficiently share threat information collected when intrusion incidents occur. Techniques should be presented for generating various IoC(Indicators of Compromise) information from various digital forensic artifacts collected from various IoT devices, and for sharing this information through CTI(Cyber Threat Intelligence) systems such as MISP. In this study, when various artifacts are collected upon intrusion incidents in IoT devices, we propose a method for generating detailed attack information as IoCs and sharing threat information efficiently by applying the Hub & Spoke model in CTI systems like MISP. The application of the proposed threat information sharing model is expected to enhance response time and detection performance in the cyber incident analysis process, thus improving the ability to detect and respond to intelligent cyber-attacks targeting IoT devices

KEYWORDS

IoT, Cyber Threat Intelligence, Cyber Incident Response, Indicators of Compromise, Sharing Model

Citation status

* References for papers published after 2023 are currently being built.

[other] Johnson, C. / 2016 / Guide to Cyber Threat Information Sharing / NIST Special Publication 800-150

[journal] Vasil Rizov / 2018 / Information Sharing for Cyber Threats / International Journal of Information Security 39(1) : 43~50

[journal] A. Pala / 2019 / Information sharing in cybersecurity : A review / Decis. Anal 16(3) : 172~196

[confproc] S. Ghernaouti / 2019 / Information sharing in cybersecurity : Enhancing security, trust and privacy by capacity building / 2019 3rd Cyber Security in Networking Conference (CSNet) : 58~62

[journal] Wagner, T. D. / 2019 / Cyber threat intelligence sharing : Survey and research directions / Computers & Security 87 : 1~13

[journal] D. Preuveneers / 2022 / Distributed Security Framework for Reliable Threat Intelligence Sharing / Security and Communication Networks 2022

[web] R. Brown / 2021 / SANS Cyber Treat Intelligence (CTI) Survey / SANS Institute / https://www.sans.org/white-papers/40080/Tech.Rep

[journal] S. Abu / 2018 / An Enhancement of Cyber Threat Intelligence Framework / J. Adv. Res. Dyn. Control. Syst 10 : 96~104

[confproc] Mavroeidis, V. / 2017 / Cyber threat intelligence model : An evaluation of taxonomies, sharing standards, and ontologies within cyber threat intelligence / Intelligence and Security Informatics Conference (EISIC) : 91~98

[journal] T. D. Wagner / 2018 / A Novel Trust Taxonomy for Shared Cyber Threat Intelligence / Security and Communication Networks 2018

[web] / MISP Threat Sharing / https://www.misp-project.org

[web] / OpenCTI / https://filigran.io/solutions/products/opencti-threat-intelligence/

[confproc] Burger, E. W. / 2017 / Taxonomy model for cyber threat intelligence information exchange technologies / ACM Workshop on Information Sharing & Collaborative Security : 51~60

[journal] Maria Stoyanova / 2020 / A Survey on the Internet of Things(IoT)Forensics : Challenges, Approaches, and Open Issues / IEEE Communications Surveys & Tutorials 22(2) : 1191~1221

[web] / STIX(TM) Version 2.0 / https://www.oasis-open.org/standard/stix2-0/

[journal] 이형우 / 2022 / Analysis of Cyber Incident Artifact Data Enrichment Mechanism for SIEM / 사물인터넷융복합논문지 / 한국사물인터넷학회 8(5) : 1~9

[journal] 이형우 / 2023 / Indicators of Compromise Data Generation Method for Malware on Cyber Incident Occurrence in IoT Environments / 사물인터넷융복합논문지 / 한국사물인터넷학회 9(4) : 1~8

[web] / MITRE ATT&CK / https://attack.mitre.org

KJCKorea
Journal Central

Journal of Internet of Things and Convergence 2023 KCI Impact Factor : 0.89

IoT System Cyber Threat Information Sharing Method

ABSTRACT

KEYWORDS

Citation status

* References for papers published after 2023 are currently being built.

Journal of Internet of Things and Convergence 2023 KCI Impact Factor : 0.89

IoT System Cyber Threat Information Sharing Method

ABSTRACT

KEYWORDS

Statistics

Tools

Issue List

Citation status

KCI Citation Counts (0)

REFERENCES (18) * References for papers published after 2023 are currently being built.

Search PDF

Citation

* References for papers published after 2023 are currently being built.