Blockchain-based threat intelligence exchange sharing system and method

Abstract

The invention relates to the field of computer network security and discloses a blockchain-based threat intelligence exchange and sharing system comprising a login filtering module, a blockchain-basedsecurity wallet module, a sharing community, an expert representative review module and a threat intelligence reputation database. Threat intelligences form an exiting security manufacturer and security expert individual are original inputs of the threat intelligence exchange and sharing system; and threat intelligences inputted by individual users subsequently are stored into the threat intelligence reputation database after examination and verification of effectiveness by expert representatives. According to the invention, threat intelligences of all sources are collected and the collectedthreat intelligences are stored and updated by the blockchain, so that the timeliness and effectiveness of threat intelligence sharing as well as the threat intelligence sharing security, confidentiality and privacy are improved.

Description

technical field [0001] The present invention relates to the field of computer network security, in particular to a system and method for exchanging and sharing threat information based on blockchain. Background technique [0002] Threat intelligence (Threat intelligence) is to protect cyberspace resources from threats. It uses the experience and skills of security experts and professional teams to generate relevant information about security and threats, including vulnerabilities, threats, characteristics, lists, attributes, and solutions. The knowledge carrier of recommendations and other content; threat intelligence is evidence-based knowledge, including the environment, mechanisms, indicators, significance and feasibility recommendations, existing or emerging, threats or hazards to assets, is the collection, evaluation and application of security threats A collection of data on threat actors, exploits, malware, vulnerabilities, and indicators of vulnerabilities that can b...

AI Technical Summary

Problems solved by technology

However, the sharing of threat intelligence also faces many challenges, such as the difficulty of putting the original information in a wider information environment around the attacker, such as the identity, purpose, and time, place, and method of the attacker; the effectiveness of threat intelligence sharing , Threats that no longer exist should not be collected; the timeliness of threat intelligence sharing should not be lower than the speed of action of hackers; threat intelligence sharing information involves the authenticity and reliability of automated execution; finally, the confidentiality and security of threat intelligence sharing Privacy concerns complicate the situation

Images