基于区块链技术的威胁情报共享系统研究

Research on Threat Intelligence Sharing System Based on Blockchain Technology

威胁情报融合了网络安全、情报学等多方面的知识,合理地利用威胁情报可以判断攻击者的攻击目标、时间等,然后及时地采取相应的防御手段,保护网络环境的安全。但是目前对于威胁情报的利用还存在诸多问题:威胁情报数据规范程度不高;各个机构情报数据集中存储,一方面可能会因为网络攻击造成数据泄露,另一方面各个情报机构间的数据难以共享,用户想要获取情报数据更是困难;另外,各用户间的信任问题也难以得到解决。文章针对上述问题提出一个基于区块链技术的威胁情报共享系统。

Threat intelligence integrates the knowledge of network security,informatics and other aspects.Making rational use of threat intelligence can judge the attacker's attack target and time,and then make corresponding defense measures in time to protect the security of the network environment.However,there are still many problems in the use of Threat Intelligence:the standardization of threat intelligence data is not high;The centralized storage of intelligence data of various agencies,on the one hand,may cause data leakage due to network attacks,on the other hand,the data between various intelligence agencies is difficult to share,and it is even more difficult for users to obtain intelligence data.In addition,it is difficult to solve the trust problem among users.To solve the above problems,this paper proposes a threat intelligence sharing system based on blockchain technology.