Secure exchange of cyber threat intelligence using TAXII and distributed ledger technologies - Application for electrical power and energy system

dc.contributorAalto-yliopistofi
dc.contributorAalto Universityen
dc.contributor.authorPahlevan, Maryamen_US
dc.contributor.authorVoulkidis, Artemisen_US
dc.contributor.authorVelivassaki, Terpsichori-Helenen_US
dc.contributor.departmentDepartment of Communications and Networkingen
dc.contributor.groupauthorNetwork Security and Trusten
dc.contributor.organizationSynelixis Solutions S.A.en_US
dc.date.accessioned2021-09-02T08:45:00Z
dc.date.available2021-09-02T08:45:00Z
dc.date.issued2021-08-17en_US
dc.descriptionFunding Information: This work was partially funded by the H2020 PHOENIX project, contract no. 832989, within the H2020 Framework Program of the European Commission. Publisher Copyright: © 2021 ACM. | openaire: EC/H2020/832989/EU//PHOENIX
dc.description.abstractThe energy sector has been, in recent years, the target of sophisticated cyberattacks. Although the importance of collaborative cyber-security consciousness, expressed as extensive cyber threat intelligence sharing, is undoubted, the standardization of the means of exchanging cyber threat information efficiently and securely has been inadequately addressed and is mostly expressed by the emergence of the Trusted Automated eXchange of Indicator Information (TAXIITM) protocol which faces major deficiencies when it comes to data integrity assurance and suitability for event-driven architectures. This paper presents a novel approach enabling secure and real-time exchange of cyber threat information, by extending the technological capacity of the TAXII framework and addressing its deficiencies through the integration of Distributed Ledger Technologies (DLT) and a generalized publish-subscribe middleware. The applicability of the proposed solution has been validated in several use cases addressing the real needs of Electrical Power and Energy Systems.en
dc.description.versionPeer revieweden
dc.format.extent8
dc.format.mimetypeapplication/pdfen_US
dc.identifier.citationPahlevan, M, Voulkidis, A & Velivassaki, T-H 2021, Secure exchange of cyber threat intelligence using TAXII and distributed ledger technologies - Application for electrical power and energy system . in Proceedings of International Conference on Availability, Reliability and Security, ARES 2021 ., 122, ACM, International Conference on Availability, Reliability and Security, Vienna, Austria, 17/08/2021 . https://doi.org/10.1145/3465481.3470476en
dc.identifier.doi10.1145/3465481.3470476en_US
dc.identifier.isbn9781450390514
dc.identifier.otherPURE UUID: 1b63b8d4-4cdc-498d-9c7a-01d6790aa64den_US
dc.identifier.otherPURE ITEMURL: https://research.aalto.fi/en/publications/1b63b8d4-4cdc-498d-9c7a-01d6790aa64den_US
dc.identifier.otherPURE LINK: http://www.scopus.com/inward/record.url?scp=85113225523&partnerID=8YFLogxKen_US
dc.identifier.otherPURE FILEURL: https://research.aalto.fi/files/66994364/ELEC_Pahlevan_etal_Secure_exchange_of_cyber_threat_ARES_2021_acceptedauthormanuscript.pdfen_US
dc.identifier.urihttps://aaltodoc.aalto.fi/handle/123456789/109572
dc.identifier.urnURN:NBN:fi:aalto-202109028804
dc.language.isoenen
dc.relationinfo:eu-repo/grantAgreement/EC/H2020/832989/EU//PHOENIXen_US
dc.relation.ispartofInternational Conference on Availability, Reliability and Securityen
dc.relation.ispartofseriesProceedings of International Conference on Availability, Reliability and Security, ARES 2021en
dc.rightsopenAccessen
dc.subject.keywordCyber Threat Intelligenceen_US
dc.subject.keywordDistributed Ledger Technologyen_US
dc.subject.keywordEnergy Sectoren_US
dc.subject.keywordPublish-Subscribe Middlewareen_US
dc.subject.keywordTAXII Frameworken_US
dc.titleSecure exchange of cyber threat intelligence using TAXII and distributed ledger technologies - Application for electrical power and energy systemen
dc.typeConference article in proceedingsfi
dc.type.versionacceptedVersion
Files