A Reputation-based Approach using Consortium Blockchain for Cyber Threat Intelligence Sharing

TL;DR

This paper introduces a reputation-based consortium blockchain model with a novel 'Proof-of-Reputation' consensus algorithm to enhance the security, speed, and scalability of cyber threat intelligence sharing.

Contribution

It proposes a new blockchain model combining reputation management and a novel consensus algorithm tailored for secure and efficient CTI sharing.

Findings

The proposed model improves security against Byzantine attacks.

The 'Proof-of-Reputation' consensus achieves higher transaction rates.

Experimental results validate the model's effectiveness and security.

Abstract

The CTI (Cyber Threat Intelligence) sharing and exchange is an effective method to improve the responsiveness of the protection party. Blockchain technology enables sharing collaboration consortium to conduct a trusted CTI sharing and exchange without a trusted centralized institution. However, the distributed connectivity of the blockchain-based CTI sharing model proposed before exposes the systems into byzantine attacks, the compromised members of partner organizations will further decrease the accuracy and trust level of CTI by generating false reporting. To address the unbalance issues of performance in speed, scalability and security, this paper proposes a new blockchain-based CTI model, which combines consortium blockchain and distributed reputation management systems to achieve automated analysis and response of tactical threat intelligence. In addition, the novel consensus algorithm of consortium blockchain that is fit for CTI sharing and exchange introduced in this paper. The new consensus algorithm is called 'Proof-of Reputation' (PoR) consensus, which meets the requirements of transaction rate and makes the consensus in a creditable network environment through constructing a reputation model. Finally, the effectiveness and security performance of the proposed model and consensus algorithm is verified by experiments.