Please use this identifier to cite or link to this item:
https://doi.org/10.21256/zhaw-30376| Publication type: | Conference paper |
| Type of review: | Peer review (publication) |
| Title: | FeedMeter : evaluating the quality of community-driven threat intelligence |
| Authors: | Rüedlinger, Andreas Klauser, Rebecca Lamprakis, Pavlos Happe, Markus Tellenbach, Bernhard Veyisoglu, Onur Trammell, Ariane |
| et. al: | No |
| DOI: | 10.5220/0012357600003648 10.21256/zhaw-30376 |
| Proceedings: | Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP |
| Page(s): | 54 |
| Pages to: | 66 |
| Conference details: | 10th International Conference on Information Systems Security and Privacy (ICISSP), Rome, Italy, 26-28 February 2024 |
| Issue Date: | 2024 |
| Publisher / Ed. Institution: | SciTePress |
| ISBN: | 978-989-758-683-5 |
| Language: | English |
| Subjects: | Open source intelligence (OSINT); Cyber threat intelligence (CTI); Threat feed |
| Subject (DDC): | 005: Computer programming, programs and data |
| Abstract: | A sound understanding of the adversary in the form of cyber threat intelligence (CTI) is key to successful cyber defense. Various sources of CTI exist, however there is no state-of-the-art method to approximate feed quality in an automated and continuous way. In addition, finding, combining and maintaining relevant feeds is very laborious and impedes taking advantage of the full potential of existing feeds. We propose FeedMeter, a platform that collects, normalizes, and aggregates threat intelligence feeds and continuously monitors them using eight descriptive metrics that approximate the feed quality. The platform aims to reduce the workload of duplicated manual processing and maintenance tasks and shares valuable insights about threat intelligence feeds. Our evaluation of a FeedMeter prototype with more than 150 OSINT sources, conducted over four years, shows that the platform has a real benefit for the community and that the metrics are promising approximations of source quality. A comparison with a prevalent commercial threat intelligence feed further strengthens this finding. |
| URI: | https://digitalcollection.zhaw.ch/handle/11475/30376 |
| Fulltext version: | Published version |
| License (according to publishing contract): | CC BY-NC-ND 4.0: Attribution - Non commercial - No derivatives 4.0 International |
| Departement: | School of Engineering |
| Organisational Unit: | Institute of Computer Science (InIT) |
| Published as part of the ZHAW project: | HostDetective – Next Generation Active and Passive Web Server Rating System |
| Appears in collections: | Publikationen School of Engineering |
Files in This Item:
| File | Description | Size | Format | |
|---|---|---|---|---|
| 2024_Ruedlinger-etal_FeedMeter-community-driven-threat-intelligence.pdf | 558.09 kB | Adobe PDF |  View/Open |
Show full item record
Rüedlinger, A., Klauser, R., Lamprakis, P., Happe, M., Tellenbach, B., Veyisoglu, O., & Trammell, A. (2024). FeedMeter : evaluating the quality of community-driven threat intelligence [Conference paper]. Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP, 54–66. https://doi.org/10.5220/0012357600003648
Rüedlinger, A. et al. (2024) ‘FeedMeter : evaluating the quality of community-driven threat intelligence’, in Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP. SciTePress, pp. 54–66. Available at: https://doi.org/10.5220/0012357600003648.
A. Rüedlinger et al., “FeedMeter : evaluating the quality of community-driven threat intelligence,” in Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP, 2024, pp. 54–66. doi: 10.5220/0012357600003648.
RÜEDLINGER, Andreas, Rebecca KLAUSER, Pavlos LAMPRAKIS, Markus HAPPE, Bernhard TELLENBACH, Onur VEYISOGLU und Ariane TRAMMELL, 2024. FeedMeter : evaluating the quality of community-driven threat intelligence. In: Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP. Conference paper. SciTePress. 2024. S. 54–66. ISBN 978-989-758-683-5
Rüedlinger, Andreas, Rebecca Klauser, Pavlos Lamprakis, Markus Happe, Bernhard Tellenbach, Onur Veyisoglu, and Ariane Trammell. 2024. “FeedMeter : Evaluating the Quality of Community-Driven Threat Intelligence.” Conference paper. In Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP, 54–66. SciTePress. https://doi.org/10.5220/0012357600003648.
Rüedlinger, Andreas, et al. “FeedMeter : Evaluating the Quality of Community-Driven Threat Intelligence.” Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP, SciTePress, 2024, pp. 54–66, https://doi.org/10.5220/0012357600003648.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.