Study on Hybrid Cloud-based Cyber Threat Intelligence Sharing Model Requirements Analysis

Because of the phenomenal growth of internet connectivity and unceasing improvements over hardware and software technology, everything is connected without any boundaries creating the Internet of Things, which becomes part of cyberspace. As the volume of cyberspace is overgrowing, the attackers' capabilities and strategies to find new vulnerabilities are increasing too. In order to defend the attackers from stealing and poisoning critical information of cyberspace, it is crucial to implement Cyber Threat Intelligence (CTI). However, it is not a straightforward process to implement CTI for individuals and organizations because of the resource constraints such as time, capability, and cost. Hence, different stakeholders (individuals or organizations) can collaborate and create a CTI sharing platform to improve their security stances and other organizations. It is well-known that when connected devices are rapidly intensifying in IoT, the cyber threat to information will also rise. So, to own a reliable, scalable, and high-speed CTI sharing platform, the deployment model should be wisely studied. This research carefully analyzed different forms of CTI sharing deployment models: private cloud, public cloud, hybrid cloud, and on-premises. Finally, we suggest the hybrid cloud-based deployment model as a convenient solution for CTI sharing due to its desirable features such as scalability, security, reliability, and high speed.