{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T17:32:10Z","timestamp":1781285530990,"version":"3.54.1"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2020,12,9]],"date-time":"2020-12-09T00:00:00Z","timestamp":1607472000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,12,9]],"date-time":"2020-12-09T00:00:00Z","timestamp":1607472000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100002347","name":"Bundesministerium f\u00fcr Bildung und Forschung","doi-asserted-by":"publisher","award":["16KIS0501K"],"award-info":[{"award-number":["16KIS0501K"]}],"id":[{"id":"10.13039\/501100002347","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2021,10]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The exchange of threat intelligence information can make a significant contribution to improving IT security in companies and has become increasingly important in recent years. However, such an exchange also entails costs and risks, preventing many companies from participating. In addition, since legal reporting requirements were introduced in various countries, certain requirements must be taken into account in the exchange process. However, existing exchange platforms neither offer incentives to participate in the exchange process, nor fulfill requirements resulting from reporting obligations. With this work, we present a decentralized platform for the exchange of threat intelligence information. The platform supports the fulfillment of legal reporting obligations for security incidents and provides additional incentives for information exchange between the parties involved. We evaluate the platform by implementing it based on the EOS blockchain and IPFS distributed hash table. The prototype and cost measurements demonstrate the feasibility and cost-efficiency of our concept.<\/jats:p>","DOI":"10.1007\/s10207-020-00528-1","type":"journal-article","created":{"date-parts":[[2020,12,9]],"date-time":"2020-12-09T10:23:46Z","timestamp":1607509426000},"page":"741-761","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["DEALER: decentralized incentives for threat intelligence reporting and exchange"],"prefix":"10.1007","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3205-2027","authenticated-orcid":false,"given":"Florian","family":"Menges","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4265-1106","authenticated-orcid":false,"given":"Benedikt","family":"Putz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"G\u00fcnther","family":"Pernul","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,12,9]]},"reference":[{"key":"528_CR1","unstructured":"Kannengie\u00dfer, N., Lins, S., Dehling, T., Sunyaev, A.: What does not fit can be made to fit! trade-offs in distributed ledger technology designs. In: Bui, T. (ed.) 52nd Hawaii International Conference on System Sciences, HICSS 2019, Grand Wailea, Maui, Hawaii, USA, January 8\u201311, 2019, pp. 1\u201310, ScholarSpace (2019). http:\/\/hdl.handle.net\/10125\/60143"},{"key":"528_CR2","doi-asserted-by":"publisher","unstructured":"Weber, I., Gramoli, V., Ponomarev, A., Staples, M., Holz, R., Tran, A.B., Rimba, P.: On availability for blockchain-based systems. In: 36th IEEE Symposium on Reliable Distributed Systems, SRDS 2017, Hong Kong, Hong Kong, September 26\u201329, 2017, pp. 64\u201373 (2017). IEEE Computer Society. https:\/\/doi.org\/10.1109\/SRDS.2017.15","DOI":"10.1109\/SRDS.2017.15"},{"key":"528_CR3","first-page":"887","volume":"50","author":"A Schwartz","year":"2016","unstructured":"Schwartz, A., Shah, S.C., MacKenzie, M.H., Thomas, S., Potashnik, T.S., Law, B.: Automatic threat sharing: how companies can best ensure liability protection when sharing cyber threat information with other companies or organizations. Univ. Mich. J. Law Reform 50, 887 (2016)","journal-title":"Univ. Mich. J. Law Reform"},{"key":"528_CR4","doi-asserted-by":"publisher","unstructured":"Laube, S., B\u00f6hme, R.: Mandatory security information sharing with authorities: implications on investments in internal controls. In: Ray, I., Sander, T., Yung, M. (eds.) Proceedings of the 2nd ACM Workshop on Information Sharing and Collaborative Security, WISCS 2015, Denver, Colorado, USA, October 12, 2015, ACM, pp. 31\u201342 (2015). https:\/\/doi.org\/10.1145\/2808128.2808132","DOI":"10.1145\/2808128.2808132"},{"key":"528_CR5","unstructured":"Bauer, S., Fischer, D., Sauerwein, C., Latzel, S., Stelzer, D., Breu, R.: Towards an evaluation framework for threat intelligence sharing platforms. In: 53rd Hawaii International Conference on System Sciences, HICSS 2020, Maui, Hawaii, USA, January 7\u201310, 2020, pp. 1\u201310, ScholarSpace (2020). http:\/\/hdl.handle.net\/10125\/63978"},{"key":"528_CR6","unstructured":"IBM Corporation: X-Force Exchange. https:\/\/exchange.xforce.ibmcloud.com\/"},{"key":"528_CR7","unstructured":"Facebook Corporation: Facebook Threat Exchange (2019). https:\/\/developers.facebook.com\/programs\/threatexchange\/"},{"key":"528_CR8","doi-asserted-by":"crossref","unstructured":"Wagner, C., Dulaunoy, A., Iklody, A.: MISP\u2014the design and implementation of a collaborative threat intelligence sharing platform. In: Proceedings of the 2016 ACM on Workshop on Information Sharing and Collaborative Security, pp. 49\u201356 (2016)","DOI":"10.1145\/2994539.2994542"},{"key":"528_CR9","unstructured":"Luatics: OPENCTI. https:\/\/www.opencti.io\/en\/"},{"key":"528_CR10","doi-asserted-by":"publisher","first-page":"2","DOI":"10.17705\/1CAIS.03402","volume":"34","author":"CZ Liu","year":"2014","unstructured":"Liu, C.Z., Zafar, H., Au, Y.A.: Rethinking FS-ISAC: an IT security information sharing network model for the financial services sector. CAIS 34, 2 (2014)","journal-title":"CAIS"},{"key":"528_CR11","doi-asserted-by":"publisher","first-page":"101589","DOI":"10.1016\/j.cose.2019.101589","volume":"87","author":"TD Wagner","year":"2019","unstructured":"Wagner, T.D., Mahbub, K., Palomar, E., Abdallah, A.E.: Cyber threat intelligence sharing: survey and research directions. Comput. Secur. 87, 101589 (2019). https:\/\/doi.org\/10.1016\/j.cose.2019.101589","journal-title":"Comput. Secur."},{"key":"#cr-split#-528_CR12.1","doi-asserted-by":"crossref","unstructured":"Serrano, O., Dandurand, L., Brown, S.: On the design of a cyber security data sharing system. In: Proceedings of the 2014 ACM Workshop on Information Sharing 38","DOI":"10.1145\/2663876.2663882"},{"key":"#cr-split#-528_CR12.2","unstructured":"Collaborative Security. ACM, New York, USA (2014), WISCS '14, pp. 61-69"},{"key":"528_CR13","unstructured":"Dandurand, L., Kaplan, A., K\u00e1cha, P., Kadobayashi, Y., Kompanek, A., Lima, T.: Standards and tools for exchange and processing of actionable information. November (2014)"},{"key":"528_CR14","doi-asserted-by":"crossref","unstructured":"Brown, S., Gommers, J., Serrano, O.: From cyber security information sharing to threat management. In: Proceedings of the 2nd ACM Workshop on Information Sharing and Collaborative Security, pp. 43\u201349 (2015)","DOI":"10.1145\/2808128.2808133"},{"key":"528_CR15","doi-asserted-by":"crossref","unstructured":"Mohaisen, A., Al-Ibrahim, O., Kamhoua, C., Kwiat, K., Njilla, L.: Rethinking information sharing for threat intelligence. In: HotWeb 2017\u2014Proceedings of the 5th ACM\/IEEE Workshop on Hot Topics in Web Systems and Technologies (2017)","DOI":"10.1145\/3132465.3132468"},{"key":"528_CR16","unstructured":"Sauerwein, C., Sillaber, C., Mussmann, A., Breu, R.: Threat Intelligence Sharing Platforms : An Exploratory Study of Software Vendors and Research Perspectives, 13. Internationale Tagung Wirtschaftsinformatik, WI 2017, St. Gallen (2017)"},{"key":"528_CR17","doi-asserted-by":"crossref","unstructured":"Sillaber, C., Sauerwein, C., Mussmann, A., Breu, R.: Data quality challenges and future research directions in threat intelligence sharing practice. In: Proceedings of the 2016 ACM on Workshop on Information Sharing and Collaborative Security, pp. 65\u201370 (2016)","DOI":"10.1145\/2994539.2994546"},{"key":"528_CR18","unstructured":"Alexopoulos, N., Vasilomanolakis, E., Roux, S.L., Rowe, S., M\u00fchlh\u00e4user, M.: TRIDEnT: Building Decentralized Incentives for Collaborative Security (2019). arxiv:1905.03571"},{"key":"528_CR19","doi-asserted-by":"publisher","first-page":"521","DOI":"10.3390\/electronics9030521","volume":"9","author":"S Gong","year":"2020","unstructured":"Gong, S., Lee, C.: Blocis: blockchain-based cyber threat intelligence sharing framework for sybil-resistance. Electronics 9, 521 (2020)","journal-title":"Electronics"},{"key":"528_CR20","doi-asserted-by":"publisher","unstructured":"Homan, D., Shiel, I., Thorpe, C.: A new network model for cyber threat intelligence sharing using blockchain technology. In: 10th IFIP International Conference on New Technologies, Mobility and Security, NTMS 2019, Canary Islands, Spain, June 24\u201326, 2019, pp. 1\u20136. IEEE (2019). https:\/\/doi.org\/10.1109\/NTMS.2019.8763853","DOI":"10.1109\/NTMS.2019.8763853"},{"key":"528_CR21","doi-asserted-by":"publisher","unstructured":"Shafagh, H., Burkhalter, L., Hithnawi, A., Duquennoy, S.: Towards blockchain-based auditable storage and sharing of iot data. In: Thuraisingham, B.M., Karame, G., Stavrou, A. (eds.) Proceedings of the 9th Cloud Computing Security Workshop, CCSW@CCS 2017, Dallas, TX, USA, November 3, 2017, pp. 45\u201350. ACM (2017). https:\/\/doi.org\/10.1145\/3140649.3140656","DOI":"10.1145\/3140649.3140656"},{"key":"528_CR22","doi-asserted-by":"publisher","unstructured":"Wagner, E., V\u00f6lker, A., Fuhrmann, F., Matzutt, R., Wehrle, K.: Dispute resolution for smart contract-based two-party protocols. In: IEEE International Conference on Blockchain and Cryptocurrency, ICBC 2019, Seoul, Korea (South), May 14\u201317, 2019, pp. 422\u2013430. IEEE (2019). https:\/\/doi.org\/10.1109\/BLOC.2019.8751312","DOI":"10.1109\/BLOC.2019.8751312"},{"issue":"31","key":"528_CR23","first-page":"273","volume":"18","author":"D Bundestag","year":"2015","unstructured":"Bundestag, D.: Gesetz zur Erh\u00f6hung der Sicherheit informationstechnischer Systeme. Drucksache des Deutschen Bundestages 18(31), 273 (2015)","journal-title":"Drucksache des Deutschen Bundestages"},{"key":"528_CR24","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-020-00490-y","author":"D Schlette","year":"2020","unstructured":"Schlette, D., B\u00f6hm, F., Caselli, M., Pernul, G.: Measuring and visualizing cyber threat intelligence quality. Int. J. Inform. Secur. (2020). https:\/\/doi.org\/10.1007\/s10207-020-00490-y","journal-title":"Int. J. Inform. Secur."},{"key":"528_CR25","doi-asserted-by":"publisher","unstructured":"Gascon, H., Grobauer, B., Schreck, T., Rist, L., Arp, D., Rieck, K.: Mining attributed graphs for threat intelligence. In: Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy (Association for Computing Machinery, New York, NY, USA, 2017), CODASPY \u201917, pp. 15\u201322 (2017). https:\/\/doi.org\/10.1145\/3029806.3029811","DOI":"10.1145\/3029806.3029811"},{"key":"528_CR26","unstructured":"Ayman, A., Aziz, A., Alipour, A., Laszka, A.: Smart Contract Development in Practice: Trends, Issues, and Discussions on Stack Overflow, CoRR abs\/1905.0 (2019). arxiv:1905.08833"},{"key":"528_CR27","doi-asserted-by":"crossref","unstructured":"Bach, L.M., Mihaljevic, B., Zagar, M.: Comparative analysis of blockchain consensus algorithms. In: 41st International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), pp. 1545\u20131550 (2018)","DOI":"10.23919\/MIPRO.2018.8400278"},{"key":"528_CR28","unstructured":"Zmudzinski, A.: ETH Transaction Fees Hit All-Time High Second Day in a Row (2020). https:\/\/cointelegraph.com\/news\/eth-transaction-fees-hit-all-time-high-second-day-in-a-row"},{"key":"528_CR29","unstructured":"Larimer, D.: EOSIO Dawn 3.0 Now Available (2018). https:\/\/medium.com\/eosio\/eosio-dawn-3-0-now-available-49a3b99242d7"},{"key":"528_CR30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03035-3","volume-title":"Architecture for Blockchain Applications","author":"X Xu","year":"2019","unstructured":"Xu, X., Weber, I., Staples, M.: Architecture for Blockchain Applications. Springer, Berlin (2019)"},{"key":"528_CR31","unstructured":"Bundesamt fuer Sicherheit in der Informationstechnik. Die Lage der IT-Sicherheit (2019). https:\/\/www.bmi.bund.de\/SharedDocs\/downloads\/DE\/publikationen\/themen\/it-digitalpolitik\/bsi-lagebericht-2019.pdf?__blob=publicationFile&v=4"},{"key":"528_CR32","volume-title":"Research Methods in Human-Computer Interaction","author":"J Lazar","year":"2010","unstructured":"Lazar, J., Feng, J.H., Hochheiser, H.: Research Methods in Human-Computer Interaction. Morgan Kaufmann, Burlington (2010)"},{"issue":"1","key":"528_CR33","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1186\/s42400-018-0017-4","volume":"1","author":"F B\u00f6hm","year":"2018","unstructured":"B\u00f6hm, F., Menges, F., Pernul, G.: Graph-based visual analytics for cyber threat intelligence. Cybersecurity 1(1), 16 (2018)","journal-title":"Cybersecurity"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00528-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-020-00528-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00528-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T17:13:21Z","timestamp":1670087601000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-020-00528-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12,9]]},"references-count":34,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2021,10]]}},"alternative-id":["528"],"URL":"https:\/\/doi.org\/10.1007\/s10207-020-00528-1","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12,9]]},"assertion":[{"value":"9 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"All authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}