Maintaining cyber security is a constant struggle of limited resources against an ever-expanding world of threats.
Maintaining cyber security is a constant struggle of limited resources against an ever-expanding world of threats. Information sharing is key to maximizing the effectiveness of those limited resources. The primary form of information sharing is the distribution of reports about new attacks, about how to detect them, and about how to counter them.
In their report CCICADA and Confidence Assertions in Cyber-Security for an Information-Sharing Environment, CCICADA researchers answer many questions about Information sharing in resisting cyberattacks.
Information sharing is vital in resisting cyberattacks, and the volume and severity of these attacks is increasing very rapidly. Therefore responders must triage incoming warnings in deciding how to act. This study asked a very specific question: “how can the addition of confidence information to alerts and warnings improve overall resistance to cyberattacks.” Download pdf of report