p-CTI: Privacy–Aware Cyber Threat Intelligence Information-Sharing Platform

该项目旨在开发一个隐私感知的网络威胁情报(CTI)信息共享平台，以促进不同组织参与共享有关网络攻击、威胁和漏洞的情报。多年来，我们的研究重点是开发确保网络物理系统安全的技术和方法。威胁情报信息共享有助于建立意识，以便做出明智、可行的决策，从而有效管理风险。然而，用户隐私是一个令人担忧的问题，因为组织不想共享原始数据，即网络攻击、威胁和漏洞的所有细节。该项目旨在通过开发一个基于人工智能(AI)的隐私感知CTI信息共享平台来填补技术空白，在该平台上，组织不需要共享有关网络攻击的原始数据。然而，使用安全的保护隐私的分布式机器学习方法，有关网络威胁的情报将被共享。拟议的平台将使大量组织能够参与分享与网络威胁有关的情报，从而帮助开发一个更好的生态系统来防御这些攻击。

The project aims to develop a privacy-aware Cyber Threat Intelligence (CTI) information-sharing platform for facilitating different organizations participate in sharing intelligence about cyber-attacks, threats, and vulnerabilities. Over the years, our research has focused on developing techniques and methods for ensuring security of cyber physical system. Threat intelligence information sharing help creating awareness for informed actionable decision making for an effective risks management. However, user privacy is a concern as organizations do not want to share the raw data; i.e., all the details of cyber-attacks, threats and vulnerabilities. This project aims to fill the technological gap by developing an Artificial Intelligence (AI) based privacy-aware CTI information-sharing platform where organizations do not need to share the raw data about cyber-attacks. However, using secure privacy-preserving distributed machine learning methods, intelligence about cyber threats would be shared. The proposed platform would enable a large number of organizations to participate in sharing cyber threat-related intelligence, and hence help develop a better ecosystem to defend against those attacks.