Cyber Threat Information Sharing System for Industrial Control System (ICS)

In pursuit of enhanced cyber security capability in the whole industry, an information sharing scheme for ICS-related security information is sought after. It is suggested that exchanging cyber threat information described in a specific machine-readable format can partly automate the security measure processes and eventually lighten the workload of technical personnel. This will also enable information sharing across the sector and accordingly the effective implementation of security measures (detect infection, block suspicious communication etc.) in an early stage. This paper proposes a system to share cyber threat information with a wide range of organisations and format of the data to be exchanged through the system.