Threat intelligence platform for the energy sector

Rafał Leszczyna; Michał Wróbel

doi:10.1002/spe.2705

Threat intelligence platform for the energy sector

Abstract

In recent years, critical infrastructures and power systems in particular have been subjected to sophisticated cyberthreats, including targeted attacks and advanced persistent threats. A promising response to this challenging situation is building up enhanced threat intelligence that interlinks information sharing and fine-grained situation awareness. In this paper a framework which integrates all levels of threat intelligence i.e. strategic, tactical, operational and technical is presented. The platform implements the centralised model of information exchange with peer-to-peer interactions between partners as an option. Several supportive solutions were introduced, including anonymity mechanisms or data processing and correlation algorithms. A data model that enables communication of cyberincident information, both in natural language and machine-readable formats was defined. Similarly, security requirements for critical components were devised. A pilot implementation of the platform was developed and deployed in the operational environment, which enabled practical evaluation of the design. Also the security of the anonymity architecture was analysed.

Citations

7

CrossRef
0

Web of Science
1 1

Scopus

Authors (2)

Cite as

Full text

download paper

downloaded 9 times

Publication version: Accepted or Published Version
DOI:: Digital Object Identifier (open in new tab) 10.1002/spe.2705
License: Copyright (2019 John Wiley & Sons, Ltd.)

full content of the article see on external site open in new tab

Keywords

Details

Category:: Articles
Type:: artykuł w czasopiśmie wyróżnionym w JCR
Published in:: SOFTWARE-PRACTICE & EXPERIENCE no. 49, pages 1225 - 1254,
ISSN: 0038-0644
Language:: English
Publication year:: 2019
Bibliographic description:: Leszczyna R., Wróbel M.: Threat intelligence platform for the energy sector// SOFTWARE-PRACTICE & EXPERIENCE. -Vol. 49, iss. 8 (2019), s.1225-1254
DOI:: Digital Object Identifier (open in new tab) 10.1002/spe.2705
Verified by:: Gdańsk University of Technology