{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T03:48:04Z","timestamp":1791258484436,"version":"4.1.0"},"reference-count":73,"publisher":"Ubiquity Press, Ltd.","license":[{"start":{"date-parts":[[2024,1,19]],"date-time":"2024-01-19T00:00:00Z","timestamp":1705622400000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"National Science Foundation","award":["1840034"],"award-info":[{"award-number":["1840034"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["CODATA"],"abstract":"<jats:p>Data sharing is crucial for strengthening research integrity and outcomes and for addressing complex problems. In cybersecurity research, data sharing can enable the development of new security measures, prediction of malicious attacks, and increased privacy. Understanding the landscape of data sharing and use in cybersecurity research can help to improve both the existing practices of data management and use and the outcomes of cybersecurity research. To this end, this study used methods of qualitative analysis and descriptive statistics to analyze 171 papers published between 2015 and 2019, their authors\u2019 characteristics, such as gender and professional title, and datasets\u2019 attributes, including their origin and public availability. The study found that more than half of the datasets in the sample (58%) and an even larger percentage of code in the papers (89%) were not publicly available. By offering an updated in-depth perspective on data practices in cybersecurity, including the role of authors, research methods, data sharing, and code availability, this study calls for the improvement of data management in cybersecurity research and for further collaboration in addressing the issues of cyberinfrastructure, policies, and citation and attribution standards in order to advance the quality and availability of data in this field.<\/jats:p>","DOI":"10.5334\/dsj-2024-003","type":"journal-article","created":{"date-parts":[[2024,1,19]],"date-time":"2024-01-19T05:38:27Z","timestamp":1705642707000},"page":"3","source":"Crossref","is-referenced-by-count":4,"title":["Data Sharing and Use in Cybersecurity Research"],"prefix":"10.5334","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9801-2277","authenticated-orcid":false,"given":"Inna","family":"Kouper","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stacy","family":"Stone","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"3285","published-online":{"date-parts":[[2024,1,19]]},"reference":[{"key":"key20240119053822_B1","doi-asserted-by":"crossref","first-page":"5088","DOI":"10.1016\/j.promfg.2015.07.523","article-title":"Log analysis of cyber security training exercises","volume":"3","year":"2015","journal-title":"Procedia Manufacturing"},{"key":"key20240119053822_B2","first-page":"135","article-title":"Promoting access to public research data for scientific, economic, and social development","volume":"3","year":"2006","journal-title":"Data Science Journal"},{"key":"key20240119053822_B3","first-page":"3867","article-title":"Resolving the cybersecurity data sharing paradox to scale up cybersecurity via a co-production approach towards data sharing","year":"2020"},{"key":"key20240119053822_B4","first-page":"251","article-title":"Securing the human: Broadening diversity in cybersecurity","year":"2019"},{"key":"key20240119053822_B5","first-page":"111","volume-title":"Collaboration in the New Life Sciences","year":"2012"},{"key":"key20240119053822_B6","unstructured":"Balenson, D, Tinnel, L and Benzel, T. 2015. Cybersecurity experimentation of the future (CEF): Catalyzing a new generation of experimental cybersecurity research. SRI International and USC Information Sciences Institute. Available at https:\/\/cef.cyberexperimentation.org\/application\/files\/2616\/2160\/7871\/CEF_Final_Report_Bound_20150922.pdf"},{"key":"key20240119053822_B7","unstructured":"Balenson, D, Tinnel, LS and Kouper, I. 2020. Panel discussion and audience dialogue: Sharing artifacts and data for cybersecurity experimentation. Available at https:\/\/www.usenix.org\/conference\/cset20\/panel [Last accessed 11 August 2020]."},{"key":"key20240119053822_B8","article-title":"Research objects: Towards exchange and reuse of digital knowledge","year":"2010","journal-title":"Nature Precedings"},{"issue":"1\/2","key":"key20240119053822_B9","first-page":"1","article-title":"Building global infrastructure for data sharing and exchange through the research data alliance","volume":"20","year":"2014","journal-title":"D-Lib Magazine"},{"key":"key20240119053822_B10","unstructured":"Blackfire Technology, Inc. 2019. Impact CyberTrust. Available at https:\/\/www.impactcybertrust.org\/ [Last accessed 3 February 2022]."},{"key":"key20240119053822_B11","first-page":"1","article-title":"Analysis of the 1999 DARPA\/Lincoln Laboratory IDS evaluation data with NetADHICT","year":"2009","journal-title":"2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications"},{"key":"key20240119053822_B12","first-page":"37","article-title":"Using cyber defense exercises to obtain additional data for attacker profiling","year":"2016"},{"key":"key20240119053822_B13","unstructured":"Camp, LJ, Cranor, L, Feamster, N, Feigenbaum, J, Forrest, S, Kotz, D, Lee, W, Savage, S, Smith, S, Spafford, E and Stolfo, S. 2009. Data for cybersecurity research: Process and \u201cWish List.\u201d Available at https:\/\/www.researchgate.net\/publication\/255960171_Data_for_Cybersecurity_Research_Process_and_Wish_List."},{"issue":"2","key":"key20240119053822_B14","doi-asserted-by":"crossref","first-page":"95","DOI":"10.1016\/j.tree.2018.11.010","article-title":"Early career researchers embrace data sharing","volume":"34","year":"2019","journal-title":"Trends in Ecology & Evolution"},{"issue":"2","key":"key20240119053822_B15","doi-asserted-by":"crossref","first-page":"22","DOI":"10.17645\/pag.v6i2.1385","article-title":"Cybersecurity research meets science and technology studies","volume":"6","year":"2018","journal-title":"Politics and Governance"},{"issue":"2","key":"key20240119053822_B16","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1016\/j.lisr.2019.04.004","article-title":"Global perspectives of research data sharing: A systematic literature review","volume":"41","year":"2019","journal-title":"Library & Information Science Research"},{"key":"key20240119053822_B17","volume-title":"Institutions for cybersecurity: International responses and data sharing initiatives","year":"2018"},{"issue":"10","key":"key20240119053822_B18","doi-asserted-by":"crossref","first-page":"13","DOI":"10.22215\/timreview\/835","article-title":"Defining cybersecurity","volume":"4","year":"2014","journal-title":"Technology Innovation Management Review"},{"key":"key20240119053822_B19","unstructured":"Cybersecurity. 2009. Cybersecurity Glossary. Available at https:\/\/niccs.cisa.gov\/about-niccs\/cybersecurity-glossary#C [Last accessed 22 July 2021]."},{"issue":"2","key":"key20240119053822_B20","first-page":"215","article-title":"Managing scientific data as public assets: Data sharing practices and policies among full-time government employees","volume":"65","year":"2013","journal-title":"Journal of the Association for Information Science and Technology"},{"key":"key20240119053822_B21","unstructured":"Dumitra\u015f, T. 2018. Worldwide Intelligence Network Environment (WINE). Available at http:\/\/users.umiacs.umd.edu\/~tdumitra\/blog\/old\/worldwide-intelligence-network-environment\/ [Last accessed 29 June 2022]."},{"key":"key20240119053822_B22","first-page":"89","article-title":"Toward a standard benchmark for computer security research: The worldwide intelligence network environment (WINE)","year":"2011"},{"key":"key20240119053822_B23","first-page":"193","article-title":"Privacy principles for sharing cyber security data","year":"2015","journal-title":"2015 IEEE Security and Privacy Workshops"},{"key":"key20240119053822_B24","article-title":"MAWILab: Combining diverse anomaly detectors for automated anomaly labeling and performance benchmarking","year":"2010"},{"issue":"2","key":"key20240119053822_B25","first-page":"90","article-title":"Data hoarding and information clutter: The impact on cost, life span of data, effectiveness, sharing, productivity, and knowledge management culture","volume":"13","year":"2012","journal-title":"Issues in Information Systems"},{"issue":"1","key":"key20240119053822_B26","article-title":"A survey of researchers\u2019 needs and priorities for data sharing","volume":"20","year":"2021","journal-title":"Data Science Journal"},{"key":"key20240119053822_B27","first-page":"489","article-title":"Towards efficient collaboration in cyber security","year":"2010"},{"key":"key20240119053822_B28","unstructured":"Information Centre of Excellence for Tech Innovation (ISCX). 2007. Datasets. Available at http:\/\/www.iscx.ca\/datasets\/ [Last accessed 3 February 2022]."},{"key":"key20240119053822_B29","unstructured":"InfraGuard. 2018. Available at https:\/\/www.infragard.org\/ [Last accessed 3 February 2022]."},{"issue":"3","key":"key20240119053822_B30","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1145\/1462571.1462577","article-title":"The ORCHESTRA Collaborative Data Sharing System","volume":"37","year":"2008","journal-title":"ACM SIGMOD Record"},{"key":"key20240119053822_B31","article-title":"Bridging the bubbles: Connecting academia and industry in cybersecurity research. [Preprint]","year":"2023"},{"key":"key20240119053822_B32","first-page":"705","article-title":"Cybersecurity","year":"2003"},{"issue":"7479","key":"key20240119053822_B33","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1038\/504211a","article-title":"Bibliometrics: Global gender disparities in science","volume":"504","year":"2013","journal-title":"Nature"},{"key":"key20240119053822_B34","first-page":"15","article-title":"Operational security log analytics for enterprise breach detection","year":"2016","journal-title":"2016 IEEE Cybersecurity Development (SecDev)"},{"key":"key20240119053822_B35","article-title":"Agile research for cybersecurity: creating authoritative, actionable knowledge when speed matters","year":"2017"},{"key":"key20240119053822_B36","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1016\/j.cose.2017.11.004","article-title":"UGR\u201916: A new dataset for the evaluation of cyclostationarity-based network IDSs","volume":"73","year":"2018","journal-title":"Computers and Security"},{"key":"key20240119053822_B37","doi-asserted-by":"crossref","first-page":"220","DOI":"10.1007\/b13476","volume-title":"Recent Advances in Intrusion Detection","author":"Vigna Giovanni","year":"2003"},{"key":"key20240119053822_B38","volume-title":"A fragmented whole: Cooperation and learning in the practice of information security","year":"2018"},{"issue":"4","key":"key20240119053822_B39","doi-asserted-by":"crossref","first-page":"693","DOI":"10.1007\/s10739-018-9538-7","article-title":"The Bermuda Triangle: The pragmatics, policies, and principles for data sharing in the history of the Human Genome Project","volume":"51","year":"2018","journal-title":"Journal of the History of Biology"},{"issue":"4","key":"key20240119053822_B40","doi-asserted-by":"crossref","first-page":"262","DOI":"10.1145\/382912.382923","article-title":"Testing intrusion detection systems: A critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory","volume":"3","year":"2000","journal-title":"ACM Transactions on Information and System Security"},{"key":"key20240119053822_B41","unstructured":"MIT Lincoln Laboratory. 2016. Cyber Grand Challenge \u2013 Datasets. Available at https:\/\/www.ll.mit.edu\/r-d\/datasets\/cyber-grand-challenge-datasets [Last accessed 3 February 2022]."},{"key":"key20240119053822_B42","unstructured":"Moore, T, Kenneally, E, Collett, M and Thapa, P. 2019. Valuing cybersecurity research datasets (SSRN Scholarly Paper No. ID 3469364). Available at https:\/\/papers.ssrn.com\/abstract=3469364 [Last accessed 22 July 2021]."},{"key":"key20240119053822_B43","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","year":"2015"},{"key":"key20240119053822_B44","article-title":"A cybersecurity dataset derived from the national collegiate penetration testing competition","year":"2019"},{"issue":"7261","key":"key20240119053822_B45","doi-asserted-by":"crossref","first-page":"160","DOI":"10.1038\/461160a","article-title":"Data sharing: Empty archives","volume":"461","year":"2009","journal-title":"Nature"},{"issue":"3","key":"key20240119053822_B46","doi-asserted-by":"crossref","first-page":"172","DOI":"10.1287\/deca.2018.0387","article-title":"Information sharing in cybersecurity: A review","volume":"16","year":"2019","journal-title":"Decision Analysis"},{"issue":"1","key":"key20240119053822_B47","first-page":"25","article-title":"Gender inequality in cybersecurity: Exploring the gender gap in opportunities and progression","volume":"9","year":"2017","journal-title":"International Journal of Gender, Science and Technology"},{"issue":"1","key":"key20240119053822_B48","doi-asserted-by":"crossref","first-page":"50","DOI":"10.2478\/dim-2019-0005","article-title":"Safe open science for restricted data","volume":"3","year":"2019","journal-title":"Data and Information Management"},{"issue":"1","key":"key20240119053822_B49","article-title":"Data sharing at scale: A heuristic for affirming data cultures","volume":"18","year":"2019","journal-title":"Data Science Journal"},{"issue":"7698","key":"key20240119053822_B50","doi-asserted-by":"crossref","first-page":"577","DOI":"10.1038\/d41586-018-03327-w","article-title":"Cybersecurity needs women","volume":"555","year":"2018","journal-title":"Nature"},{"issue":"7921","key":"key20240119053822_B51","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1038\/s41586-022-04966-w","article-title":"Women are credited less in science than men","volume":"608","year":"2022","journal-title":"Nature"},{"key":"key20240119053822_B52","unstructured":"San Diego Supercomputer Center. 2020. Center for Applied Internet Data Analysis (CAIDA). CAIDA. Available at https:\/\/www.caida.org\/ [Last accessed 29 June 2022]."},{"issue":"1","key":"key20240119053822_B53","article-title":"Cybersecurity data science: An overview from machine learning perspective","volume":"7","year":"2020","journal-title":"Journal of Big Data"},{"key":"key20240119053822_B54","doi-asserted-by":"crossref","first-page":"140","DOI":"10.1016\/j.cose.2018.12.011","article-title":"An analysis and classification of public information security data sources used in research and practice","volume":"82","year":"2019","journal-title":"Computers & Security"},{"key":"key20240119053822_B55","first-page":"105","article-title":"PREDICT: A trusted framework for sharing data for cyber security research","year":"2011","journal-title":"Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security BADGERS \u201911"},{"issue":"2","key":"key20240119053822_B56","doi-asserted-by":"crossref","first-page":"367","DOI":"10.1365\/s43439-022-00062-x","article-title":"Could incorporating cybersecurity reporting into SOX have prevented most data breaches at U.S. publicly traded companies? An exploratory study","volume":"3","year":"2022","journal-title":"International Cybersecurity Law Review"},{"key":"key20240119053822_B57","first-page":"61","article-title":"On the design of a cyber security data sharing system","year":"2014","journal-title":"Proceedings of the 2014 ACM Workshop on Information Sharing & Collaborative Security \u2013 WISCS \u201914"},{"issue":"3","key":"key20240119053822_B58","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.cose.2011.12.012","article-title":"Toward developing a systematic approach to generate benchmark datasets for intrusion detection","volume":"31","year":"2012","journal-title":"Computers & Security"},{"key":"key20240119053822_B59","first-page":"169","volume-title":"Financial Cryptography and Data Security","year":"2012"},{"key":"key20240119053822_B60","first-page":"1","article-title":"Cybersecurity, women, and minorities: Findings and recommendations from a preliminary investigation","year":"2013"},{"key":"key20240119053822_B61","first-page":"305","article-title":"Outside the closed world: On using machine learning for network intrusion detection","year":"2010","journal-title":"2010 IEEE Symposium on Security and Privacy"},{"key":"key20240119053822_B62","first-page":"47","volume-title":"Secure IT Systems","year":"2012"},{"key":"key20240119053822_B63","first-page":"39","volume-title":"IP Operations and Management","year":"2009"},{"issue":"5","key":"key20240119053822_B64","doi-asserted-by":"crossref","first-page":"839","DOI":"10.1007\/s10734-014-9808-z","article-title":"Gender diversity strategy in academic departments: exploring organizational determinants","volume":"69","year":"2015","journal-title":"Higher Education"},{"issue":"2","key":"key20240119053822_B65","doi-asserted-by":"crossref","first-page":"1744","DOI":"10.1109\/COMST.2018.2885561","article-title":"Data-driven cybersecurity incident prediction: A survey","volume":"21","year":"2019","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"key20240119053822_B66","first-page":"1","article-title":"A detailed analysis of the KDD CUP 99 data set","year":"2009","journal-title":"2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications"},{"issue":"6","key":"key20240119053822_B67","article-title":"Data sharing by scientists: Practices and perceptions","volume":"6","year":"2011","journal-title":"PLoS ONE"},{"key":"key20240119053822_B68","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1145\/3524501.3527595","volume-title":"Proceedings of the Third Workshop on Gender Equality, Diversity, and Inclusion in Software Engineering","year":"2022"},{"key":"key20240119053822_B69","unstructured":"University of California Irvine. 1999. KDD Cup 1999 Data. Available at https:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html [Last accessed 3 February 2022]."},{"key":"key20240119053822_B70","unstructured":"US Department of Homeland Security. 2022. Cyber Information Sharing and Collaboration Program (CISCP). Available at https:\/\/www.cisa.gov\/ciscp [Last accessed 3 February 2022]."},{"issue":"1","key":"key20240119053822_B71","doi-asserted-by":"crossref","first-page":"155","DOI":"10.2308\/ISYS-19-033","article-title":"An integrative review and analysis of cybersecurity research: Current state and future directions","volume":"35","year":"2021","journal-title":"Journal of Information Systems"},{"issue":"1","key":"key20240119053822_B72","first-page":"79","article-title":"A governance model of a collaborative networked organization for cybersecurity research","volume":"46","year":"2020","journal-title":"Information & Security"},{"key":"key20240119053822_B73","unstructured":"Zheng, M, Robbins, H, Chai, Z, Thapa, P and Moore, T. 2018. Cybersecurity research datasets: Taxonomy and empirical analysis. In: 11th USENIX Workshop on Cyber Security Experimentation and Test CSET-18. Available at https:\/\/www.usenix.org\/system\/files\/conference\/cset18\/cset18-paper-zheng.pdf [Last accessed 22 July 2021]."}],"container-title":["Data Science Journal"],"original-title":[],"link":[{"URL":"https:\/\/account.datascience.codata.org\/index.php\/up-j-dsj\/article\/download\/1600\/1265","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/account.datascience.codata.org\/index.php\/up-j-dsj\/article\/download\/1600\/1266","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/account.datascience.codata.org\/index.php\/up-j-dsj\/article\/download\/1600\/1267","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/account.datascience.codata.org\/index.php\/up-j-dsj\/article\/download\/1600\/1265","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T10:44:30Z","timestamp":1782816270000},"score":1,"resource":{"primary":{"URL":"https:\/\/account.datascience.codata.org\/index.php\/up-j-dsj\/article\/view\/1600"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1,19]]},"references-count":73,"URL":"https:\/\/doi.org\/10.5334\/dsj-2024-003","relation":{},"ISSN":["1683-1470"],"issn-type":[{"value":"1683-1470","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,1,19]]}}}