Nowadays, both the amount of cyberattacks and their sophistication have considerably increased, and their prevention is of concern of most of organizations. Cooperation by means of information sharing is a promising strategy to address this problem, but unfortunately it poses many challenges. Indeed, looking for a win-win environment is not straightforward and organizations are not properly motivated to share information. This work presents a model to analyse the benefits and drawbacks of information sharing among organizations that presents a certain level of dependency. The proposed model applies functional dependency network analysis to emulate attacks propagation and game theory for information sharing management. We present a simulation framework implementing the model that allows for testing different sharing strategies under several network and attack settings. Experiments using simulated environments show how the proposed model provides insights on which conditions and scenarios are beneficial for information sharing.
@cite_11 use game theory to help organizations to decide whether to share information or not, using the CYBEX framework @cite_7 . Authors use evolutionary game theory in order to attain an evolutionary stable strategy (ESS) under various conditions. These conditions are extracted through simulation with synthetic data in a non-cooperative scenario with rational and profit-seeking firms. The main incentive for sharing is the information received, and thus the knowledge gained. In our work we also consider this knowledge as an incentive for sharing. @cite_12 present a two stage Bayesian game between two firms to help to decide how much to invest in searching vulnerabilities and how much of this information to share. Authors determine the Perfect Bayesian Equilibrium to extract analytically strategy conditions encouraging information sharing. In @cite_12 a firm benefits from losses in another, namely due to exploited bugs. Moreover, they distinguished costs between: direct loss (of compromised firm), common loss by market shrinkage and competitive loss.
@cite_12 @cite_7 @cite_11
2054480731 2608407642
The cybersecurity information exchange framework, known as CYBEX, is currently undergoing its first iteration of standardization efforts within ITU-T. The framework describes how cybersecurity information is exchanged between cybersecurity entities on a global scale and how the exchange is assured. The worldwide implementation of the framework will eventually minimize the disparate availability of cybersecurity information. This paper provides a specification overview, use cases, and the current status of CYBEX. Technology Information technology; Terrorism and threats Cyberterrorism; Technology Modeling and simulation; Cyberspace and Cybersecurity