GENERAL ENQUIRIES: Tel: + 27 12 841 2911 | Email: callcentre@csir.co.za

Show simple item record

dc.contributor.author Mtsweni, Jabu
dc.contributor.author Shozi, Nobubele A
dc.contributor.author Matenche, Kqwadi
dc.contributor.author Mutemwa, Muyowa
dc.contributor.author Mkhonto, Njabulo
dc.contributor.author Jansen van Vuuren, Joey
dc.date.accessioned 2017-07-28T09:08:48Z
dc.date.available 2017-07-28T09:08:48Z
dc.date.issued 2016-03
dc.identifier.citation Mtsweni, J., Shozi, N.A., Matenche, K. et al. 2016. Development of a semantic-enabled cybersecurity threat intelligence sharing model. 11th International Conference on Cyber Warfare & Security, 17 - 18 March 2016, Boston University, Boston, USA. en_US
dc.identifier.uri http://hdl.handle.net/10204/9370
dc.description 11th International Conference on Cyber Warfare & Security, 17 - 18 March 2016, Boston University, Boston, USA en_US
dc.description.abstract Big Data is transforming the global technological landscape by elevating online information access required for addressing everyday challenges, such as detecting in real-time the spread of diseases within areas of interest. As the data in the cyberspace continues to grow in a gargantuan manner due to the popularity and successes of Web 2.0 technologies and social networks, amongst other reasons, organizations also continue to face the complex challenge of sifting through this data to timely detect and respond to security threats relevant to their operating domain. Traditional businesses and governmental organisations generally rely on inefficient and discrete solutions that rely on limited sources of information, signature-based and anomaly-based approaches to detect known cyber threats and attacks. On the contrary, threat agents continue to develop advanced techniques for their cyber espionage, reconnaissance missions, and ultimately devastating attacks. In addition, emerging cybersecurity intelligence solutions lack the semantic knowledge essential for automated sharing of timely and context-aware information within a specific operating domain. Moreover, existing cybersecurity information sharing solutions lack the visualization and intelligence necessary for handling the large volume of unstructured data generated by multiple sources across different sectors. In an attempt to address some of these challenges, this paper presents a preposition of a semantic-enabled sharing model for exchanging timely and relevant cybersecurity intelligence with trusted collaborators. Drawing from previous research and open source sharing platforms, such as CRITS, this model is underpinned by common information exchange standards, such as STIX and TAXII. The proposed cross-platform sharing model is evaluated by exploiting a large stream of cybersecurity-related tweets and semantic knowledge available from a variety of data sources. Preliminary results suggest that semantic knowledge is essential towards enabling collaborative and automated exchange of timely and actionable cybersecurity intelligence. en_US
dc.language.iso en en_US
dc.relation.ispartofseries Worklist;18151
dc.subject Cybersecurity en_US
dc.subject Threat intelligence en_US
dc.subject Crowdsourcing en_US
dc.subject Big data en_US
dc.subject Web security en_US
dc.subject Vulnerabilities en_US
dc.title Development of a semantic-enabled cybersecurity threat intelligence sharing model en_US
dc.type Presentation en_US


Files in this item

This item appears in the following Collection(s)

Show simple item record

Search ResearchSpace


Advanced Search

Browse

My Account