• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International Conference on Cyber Conflict >Legal Issues Related to Cyber Threat Information Sharing Among Private Entities for Critical Infrastructure Protection
【24h】

Legal Issues Related to Cyber Threat Information Sharing Among Private Entities for Critical Infrastructure Protection

机译：与私有实体之间的网络威胁信息共享相关的法律问题，以保护关键基础架构

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The menace of cyber attacks has become a concern for both the public and private sectors. Several approaches have been proposed to tackle the challenge, but an approach that has received widespread acceptance among cyber security professionals in both public and private sectors is cyber threat information (CTI) sharing. CTI refers to any information that can help an organisation identify, assess, monitor and respond to cyber threats. It includes indicators of compromise; tactics, techniques and procedures used by threat actors; suggested actions to detect, contain, or prevent attacks; and the findings from the analyses of incidents. Sharing CTI has been proposed as an efficient and effective way of improving overall cyber intelligence and defence. However, there are sources of liability that may dissuade private entities from participating in such sharing. The most cited source of liability is privacy and data protection law; although antitrust law, tort of negligence law and intellectual property law are also cited as potential sources of liability. In this study, we review the extent to which the provisions of privacy and data protection law support or refute the sharing of CTI. This will provide guidance and incentives for private entities willing to participate in CTI sharing, especially for critical infrastructure protection.
机译：网络攻击的威胁已成为公共部门和私营部门的关注点。已经提出了几种方法来应对这一挑战，但是在公共和私营部门的网络安全专业人员中，已经广泛接受的一种方法是网络威胁信息（CTI）共享。 CTI是指可以帮助组织识别，评估，监视和应对网络威胁的任何信息。它包括妥协指标;威胁行为者使用的战术，技术和程序;建议的检测，遏制或防止攻击的措施;以及事件分析中的发现。共享CTI已被提议作为一种改善整体网络情报和防御的有效途径。但是，有些责任来源可能会阻止私人实体参与此类共享。引用最多的责任来源是隐私和数据保护法;尽管反托拉斯法，过失法侵权法和知识产权法也被认为是潜在的责任来源。在这项研究中，我们回顾了隐私和数据保护法条款在多大程度上支持或驳斥了CTI的共享。这将为愿意参加CTI共享的私有实体（尤其是关键基础设施保护）提供指导和激励。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号