Cyber Threat Intelligence Sharing Mechanism And Implementation Based On Block Chain Smart Contract

Cyber threat intelligence is derived from the intersection of information science,network security and big data.In complex cyberspace environment,through the acquisition,analysis and sharing of cyber threat intelligence,enterprises,organizations and security personnel can quickly obtain new intrusion threat indicators and other more detailed information,in order to identify,interrupt and track network intruders,and to prevent more network threats.The sharing of threat intelligence can help organizations attacked by related cyber-attacks to quickly identify threats and provide appropriate protective measures.Therefore,cyber threat intelligence sharing can improve the efficiency of network protection and prevent the spread of network attacks quickly.However,there are some problems in the current cyber threat intelligence sharing,such as limited access to centralized deployment,difficulty in standardization due to high complexity of intelligence data,easy to be stolen or tampered with shared data trust problem between sharing parties.All of them directly affect the unified and secure information sharing of cyber threat information data as data assets.The features of point-to-point transmission,distributed storage,traceability and non-tamper of blockchain technology can solve some of the problems existing in current cyber threat intelligence data sharing.Different from the existing centralized data sharing platform which concentrates data on third-party organizations,each node in the blockchain system exists equally with each other and jointly maintains information data generated in data sharing.It effectively solves the malicious operation behavior and increases the reliability and security of data sharing.According to the above background,the cyber threat intelligence sharing mechanism based on block chain smart contract is proposed in this paper,and the threat intelligence sharing platform on the Ethereum blockchain is constructed.The main research work and results of this paper are showed as follows:First,the networking mode,cryptography technology,data structure and consensus algorithm of blockchain is studied in this paper.On this basis,the technical framework of Ethereum and the working principle and implementation process of smart contract on the platform of Ethereum are investigated.Second,the cyber threat intelligence sharing mechanism based on smart contract of blockchain is constructed.The classification method of cyber threat intelligence data and the sharing method of cyber threat intelligence data in blockchain are proposed.Third,the intelligence sharing platform is designed based on the proposed cyber threat intelligence sharing mechanism,including the hierarchical structure and platform function design of the platform.According to the business logic of cyber threat intelligence sharing platform,smart contracts are designed and developed.The data types,user types,shared data and other contents of cyber threat intelligence are defined as structure in the form of contracts.The state variables,function functions,structure types and contract events of these data are defined in the contracts.Fourth,on the platform of Ethereum,the business logic of each functional module is realized through smart contract development.In addition,the cyber threat intelligence sharing platform is developed and realized based on truffle framework,then the private chain cluster is built to complete the functional test of the platform.