{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T01:16:06Z","timestamp":1766452566462,"version":"3.48.0"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030665036"},{"type":"electronic","value":"9783030665043"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-66504-3_6","type":"book-chapter","created":{"date-parts":[[2020,12,23]],"date-time":"2020-12-23T06:03:47Z","timestamp":1608703427000},"page":"92-113","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Risk Assessment of Sharing Cyber Threat Intelligence"],"prefix":"10.1007","author":[{"given":"Adham","family":"Albakri","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eerke","family":"Boiten","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Smith","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,12,24]]},"reference":[{"key":"6_CR1","doi-asserted-by":"crossref","unstructured":"Katti, S., Krishnamurthy, B., Katabi, D.: Collaborating against common enemies. In: Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC (2005)","DOI":"10.1145\/1330107.1330151"},{"key":"6_CR2","doi-asserted-by":"crossref","unstructured":"Albakri, A., Boiten, E., De Lemos, R.: Risks of sharing cyber incident information. In: Proceedings of the 13th International Conference on Availability, Reliability and Security - ARES 2018, pp. 1\u201310 (2018)","DOI":"10.1145\/3230833.3233284"},{"key":"6_CR3","unstructured":"European Union: Regulation 2016\/679 of the European parliament and the Council of the European Union of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/. Official Journal of the European Communities, vol. 59, May. pp. 1\u201388 (2016)"},{"key":"6_CR4","unstructured":"Lewis, R., Louvieris, P., Abbott, P., Clewley, N., Jones, K.: Cybersecurity information sharing: a framework for information security management in UK SME supply chains. In: ECIS 2014 Proceedings - 22nd European Conference on Information Systems (2014)"},{"key":"6_CR5","doi-asserted-by":"crossref","unstructured":"Shin, J., Son, H., Heo, G.: Cyber security risk evaluation of a nuclear I&C using BN and ET. Nucl. Eng. Technol. 49, 517\u2013524 (2017)","DOI":"10.1016\/j.net.2016.11.004"},{"key":"6_CR6","doi-asserted-by":"crossref","unstructured":"Aksu, M.U., et al.: A quantitative CVSS-based cyber security risk assessment methodology for IT systems. In: Proceedings - International Carnahan Conference on Security Technology (2017)","DOI":"10.1109\/CCST.2017.8167819"},{"issue":"3","key":"6_CR7","doi-asserted-by":"publisher","first-page":"360","DOI":"10.1111\/1468-0440.00121","volume":"26","author":"G Dickinson","year":"2001","unstructured":"Dickinson, G.: Enterprise risk management: its origins and conceptual foundation. Geneva Pap. Risk Insur. Issues Pract. 26(3), 360\u2013366 (2001)","journal-title":"Geneva Pap. Risk Insur. Issues Pract."},{"key":"6_CR8","unstructured":"ISO 27005: Information Technology- Security techniques-Information security risk management (2011)"},{"key":"6_CR9","unstructured":"NIST: Guide for Conducting Risk Assessments - Information Security (2012)"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"Alberts, C., Dorofee, A., Stevens, J., Woody, C.: Introduction to the OCTAVE approach. In: Pittsburgh, P.A., Carnegie Mellon University (2003)","DOI":"10.21236\/ADA634134"},{"key":"6_CR11","unstructured":"ENISA: ENISA Threat Landscape Report 2016: 15 Top Cyber-Threats And Trends (2017). https:\/\/goo.gl\/N3xP1F. Accessed 25 Apr 2018"},{"key":"6_CR12","unstructured":"MITRE: STIX Incident Model (2018). https:\/\/stixproject.github.io\/data-model\/1.2\/incident\/IncidentType\/. Accessed 10 Dec 2019"},{"key":"6_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1007\/978-3-030-21752-5_3","volume-title":"Privacy Technologies and Policy","author":"A Albakri","year":"2019","unstructured":"Albakri, A., Boiten, E., De Lemos, R.: Sharing cyber threat intelligence under the general data protection regulation. In: Naldi, M., Italiano, G.F., Rannenberg, K., Medina, M., Bourka, A. (eds.) APF 2019. LNCS, vol. 11498, pp. 28\u201341. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-21752-5_3"},{"key":"6_CR14","unstructured":"Coull, S.E., Wright, C.V., Monrose, F., Collins, M.P., Reiter, M.K., et al.: Playing devil\u2019s advocate: inferring sensitive information from anonymized network traces. In: NDSS (2007)"},{"key":"6_CR15","doi-asserted-by":"crossref","unstructured":"Kent, A.D., Liebrock, L.M.: Secure communication via shared knowledge and a salted hash in Ad-hoc environments. In: Proceedings - International Computer Software and Applications Conference (2011)","DOI":"10.1109\/COMPSACW.2011.30"},{"key":"6_CR16","unstructured":"Gentry, C.: A fully homomorphic encryption scheme, Stanford University (2009)"},{"key":"6_CR17","unstructured":"Armknecht, F., et al.: A Guide to Fully Homomorphic Encryption, Cryptol. ePrint Arch. (2015)"},{"key":"6_CR18","doi-asserted-by":"crossref","unstructured":"Yao, A.C.: Protocols for secure computations. In: Annual Symposium on Foundations of Computer Science - Proceedings (1982)","DOI":"10.1109\/SFCS.1982.38"},{"key":"6_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1007\/978-3-642-32946-3_5","volume-title":"Financial Cryptography and Data Security","author":"D Bogdanov","year":"2012","unstructured":"Bogdanov, D., Talviste, R., Willemson, J.: Deploying secure multi-party computation for financial data analysis. In: Keromytis, A.D. (ed.) FC 2012. LNCS, vol. 7397, pp. 57\u201364. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-32946-3_5"},{"key":"6_CR20","unstructured":"MITRE: Red October. https:\/\/github.com\/STIXProject\/schemas-test\/blob\/master\/veris\/. Accessed 09 Dec 2019"},{"key":"6_CR21","unstructured":"Kaspersky: Attackers Created Unique, Highly-Flexible Malware to Steal Data and Geopolitical Intelligence from Target Victims\u2019 Computer Systems, Mobile Phones and Enterprise Network Equipment. https:\/\/www.kaspersky.com\/about\/press-releases\/2013_kaspersky-lab-identifies-operation\u2013red-october\u2013an-advanced-cyber-espionage-campaign-targeting-diplomatic-and-government-institutions-worldwide. Accessed 25 Feb 2020"},{"key":"6_CR22","unstructured":"MISP-Project: MISP (2016). http:\/\/www.misp-project.org\/. Accessed 12 Dec 2017"}],"container-title":["Lecture Notes in Computer Science","Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-66504-3_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T01:03:20Z","timestamp":1766451800000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-66504-3_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030665036","9783030665043"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-66504-3_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"24 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Guildford","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/esorics2020.sccs.surrey.ac.uk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"366","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"72","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,16","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9,1","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-10 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}