{"id":"https://openalex.org/W4379745603","doi":"https://doi.org/10.1007/978-3-031-35190-7_10","title":"Building Collaborative Cybersecurity for\u00a0Critical Infrastructure Protection: Empirical Evidence of\u00a0Collective Intelligence Information Sharing Dynamics on\u00a0ThreatFox","display_name":"Building Collaborative Cybersecurity for\u00a0Critical Infrastructure Protection: Empirical Evidence of\u00a0Collective Intelligence Information Sharing Dynamics on\u00a0ThreatFox","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4379745603","doi":"https://doi.org/10.1007/978-3-031-35190-7_10"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-031-35190-7_10","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-35190-7_10","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-35190-7_10.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-35190-7_10.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075224309","display_name":"Eric Joll\u00e8s","orcid":"https://orcid.org/0000-0002-1206-3442"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Eric Joll\u00e8s","raw_affiliation_strings":["Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-1206-3442","affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053558512","display_name":"S\u00e9bastien Gillard","orcid":"https://orcid.org/0000-0002-3237-8599"},"institutions":[{"id":"https://openalex.org/I114457229","display_name":"University of Geneva","ror":"https://ror.org/01swzsf04","country_code":"CH","type":"education","lineage":["https://openalex.org/I114457229"]},{"id":"https://openalex.org/I94871006","display_name":"Turkish Military Academy","ror":"https://ror.org/058ya6669","country_code":"TR","type":"education","lineage":["https://openalex.org/I94871006"]}],"countries":["CH","TR"],"is_corresponding":false,"raw_author_name":"S\u00e9bastien Gillard","raw_affiliation_strings":["Department of Defense Economics, Military Academy at ETH Zurich, Zurich, Switzerland","Information Science Institute, Geneva School of Economics and Management, University of Geneva, Geneva, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-3237-8599","affiliations":[{"raw_affiliation_string":"Department of Defense Economics, Military Academy at ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I94871006"]},{"raw_affiliation_string":"Information Science Institute, Geneva School of Economics and Management, University of Geneva, Geneva, Switzerland","institution_ids":["https://openalex.org/I114457229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045909042","display_name":"Dimitri Percia David","orcid":"https://orcid.org/0000-0002-9393-1490"},"institutions":[{"id":"https://openalex.org/I4210129267","display_name":"HES-SO Valais-Wallis","ror":"https://ror.org/03r5zec51","country_code":"CH","type":"education","lineage":["https://openalex.org/I173439891","https://openalex.org/I4210129267"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Dimitri Percia David","raw_affiliation_strings":["Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","Institute of Entrepreneurship and Management, University of Applied Sciences HES-SO Valais-Wallis, Sierre, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-9393-1490","affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","institution_ids":[]},{"raw_affiliation_string":"Institute of Entrepreneurship and Management, University of Applied Sciences HES-SO Valais-Wallis, Sierre, Switzerland","institution_ids":["https://openalex.org/I4210129267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079874685","display_name":"Martin Strohmeier","orcid":"https://orcid.org/0000-0002-1936-0933"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]},{"id":"https://openalex.org/I4210146410","display_name":"Science Oxford","ror":"https://ror.org/04j8yhy50","country_code":"GB","type":"nonprofit","lineage":["https://openalex.org/I4210146410"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Martin Strohmeier","raw_affiliation_strings":["Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","Department of Computer Science, Oxford University, Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0002-1936-0933","affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","institution_ids":[]},{"raw_affiliation_string":"Department of Computer Science, Oxford University, Oxford, UK","institution_ids":["https://openalex.org/I40120149","https://openalex.org/I4210146410"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072777494","display_name":"Alain Mermoud","orcid":"https://orcid.org/0000-0001-6471-772X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alain Mermoud","raw_affiliation_strings":["Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-6471-772X","affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, armasuisse Science and Technology, Zurich, Switzerland","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5075224309"],"corresponding_institution_ids":[],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":3.6194,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.93358421,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"140","last_page":"157"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12592","display_name":"Opinion Dynamics and Social Influence","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7198827266693115},{"id":"https://openalex.org/keywords/information-sharing","display_name":"Information sharing","score":0.7123932242393494},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6165552735328674},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.4903435707092285},{"id":"https://openalex.org/keywords/collective-intelligence","display_name":"Collective intelligence","score":0.4874441921710968},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.4847800135612488},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.48328784108161926},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.47693008184432983},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.2988218069076538},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1822635531425476},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1589253544807434}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7198827266693115},{"id":"https://openalex.org/C2776854237","wikidata":"https://www.wikidata.org/wiki/Q6031064","display_name":"Information sharing","level":2,"score":0.7123932242393494},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6165552735328674},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.4903435707092285},{"id":"https://openalex.org/C89057211","wikidata":"https://www.wikidata.org/wiki/Q432197","display_name":"Collective intelligence","level":2,"score":0.4874441921710968},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.4847800135612488},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.48328784108161926},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.47693008184432983},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2988218069076538},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1822635531425476},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1589253544807434},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-031-35190-7_10","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-35190-7_10","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-35190-7_10.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:hesso.tind.io:11339","is_oa":false,"landing_page_url":"http://arodes.hes-so.ch/record/11339","pdf_url":null,"source":{"id":"https://openalex.org/S4306402432","display_name":"ArODES (HES-SO (https://www.hes-so.ch/))","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210088449","host_organization_name":"HES-SO Gen\u00e8ve","host_organization_lineage":["https://openalex.org/I4210088449"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://arodes.hes-so.ch/record/11339","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1007/978-3-031-35190-7_10","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-35190-7_10","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-35190-7_10.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.44999998807907104},{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.4000000059604645}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4379745603.pdf"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W33891176","https://openalex.org/W1505472007","https://openalex.org/W1972698480","https://openalex.org/W1974030065","https://openalex.org/W1980215929","https://openalex.org/W1999627326","https://openalex.org/W2030874315","https://openalex.org/W2041946752","https://openalex.org/W2082097596","https://openalex.org/W2115615950","https://openalex.org/W2121208632","https://openalex.org/W2123654921","https://openalex.org/W2128521145","https://openalex.org/W2132929535","https://openalex.org/W2147215426","https://openalex.org/W2236373062","https://openalex.org/W2271240940","https://openalex.org/W2281032329","https://openalex.org/W2294406194","https://openalex.org/W2533698187","https://openalex.org/W2560109291","https://openalex.org/W2617416222","https://openalex.org/W2743395552","https://openalex.org/W2758108284","https://openalex.org/W2768328670","https://openalex.org/W2862457273","https://openalex.org/W2907086308","https://openalex.org/W2938621856","https://openalex.org/W2939781344","https://openalex.org/W2948992711","https://openalex.org/W2964522977","https://openalex.org/W2967084391","https://openalex.org/W2986943692","https://openalex.org/W3000734309","https://openalex.org/W3010009703","https://openalex.org/W3049760807","https://openalex.org/W3106726050","https://openalex.org/W3124796611","https://openalex.org/W3125210271","https://openalex.org/W3128534654","https://openalex.org/W3202636126","https://openalex.org/W3206144059","https://openalex.org/W4287119136","https://openalex.org/W4297650634","https://openalex.org/W4380258880","https://openalex.org/W4388554515","https://openalex.org/W6982201563"],"related_works":["https://openalex.org/W2367468089","https://openalex.org/W2098133976","https://openalex.org/W2358591856","https://openalex.org/W2347416728","https://openalex.org/W2215702767","https://openalex.org/W4388137405","https://openalex.org/W4317371977","https://openalex.org/W2468219149","https://openalex.org/W2567150521","https://openalex.org/W2380969787"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"article":[2],"describes":[3],"three":[4,25],"collective":[5,90,154],"intelligence":[6,91,131,155],"dynamics":[7,26,42,97,110,156],"observed":[8],"on":[9,52],"ThreatFox,":[10],"a":[11,62,112,118,186],"free":[12],"platform":[13,65,95,164],"operated":[14],"by":[15,35,68],"abuse.ch":[16],"that":[17,122],"collects":[18],"and":[19,45,100,126,180,212],"shares":[20],"indicators":[21],"of":[22,48,56,89,111,136,146,169,196],"compromise.":[23],"These":[24],"are":[27,43,98,105],"empirically":[28],"analyzed":[29,99],"with":[30,74],"an":[31,53,70,203],"exclusive":[32],"dataset":[33],"provided":[34],"the":[36,46,86,94,108,134,137,150,163,167,194],"sharing":[37,64,128,138,171,199],"platform.":[38],"First,":[39],"participants\u2019":[40],"onboarding":[41],"investigated":[44],"importance":[47],"building":[49],"collaborative":[50],"cybersecurity":[51,197],"established":[54],"network":[55],"trust":[57],"is":[58,66,115,200],"highlighted.":[59],"Thus,":[60,159],"when":[61],"new":[63],"created":[67],"abuse.ch,":[69],"existing":[71],"trusted":[72],"community":[73],"\u2019power":[75],"users\u2019":[76],"will":[77],"migrate":[78],"swiftly":[79],"to":[80,84,148,206],"it,":[81],"in":[82,129,157,193],"order":[83],"enact":[85],"first":[87],"sparks":[88],"dynamics.":[92],"Second,":[93],"publication":[96],"two":[101],"different":[102],"superlinear":[103],"growths":[104],"observed.":[106],"Third,":[107],"rewarding":[109],"credit":[113],"system":[114],"described":[116],"-":[117,202],"promising":[119],"incentive":[120],"mechanism":[121],"could":[123],"improve":[124,166],"cooperation":[125],"information":[127,170,198,208],"open-source":[130],"communities":[132],"through":[133],"gamification":[135],"activity.":[139],"Overall,":[140],"our":[141],"study":[142,149],"highlights":[143],"future":[144,190],"avenues":[145],"research":[147,192],"institutional":[151],"rules":[152],"enacting":[153],"cybersecurity.":[158],"we":[160],"show":[161],"how":[162],"may":[165],"efficiency":[168],"between":[172,210],"critical":[173],"infrastructures,":[174],"for":[175,189],"example":[176],"within":[177],"Information":[178],"Sharing":[179],"Analysis":[181],"Centers":[182],"using":[183],"ThreatFox.":[184],"Finally,":[185],"broad":[187],"agenda":[188],"empirical":[191],"field":[195],"presented":[201],"important":[204],"activity":[205],"reduce":[207],"asymmetry":[209],"attackers":[211],"defenders.":[213]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}