A Framework for the Development of Sharing and Collaboration of Cyber Threat Intelligence for Colleges in Camarines Norte

Abstract

The increasing prevalence of cyber threats targeting educational institutions necessitates effective sharing and collaboration of cyber threat intelligence among schools. This research presents a framework designed to facilitate the secure and efficient sharing, storage, analysis, and collaboration of cyber threat intelligence data among schools. The focus of this paper is on the architectural design of the framework, highlighting the key components, integration points, functionalities, and workflows.
The methodology employed in this research involves designing and validating the framework through a systematic approach. The design is underpinned by the Input-Process-Output (IPO) model, which guides the construction of key workflows such as data ingestion, analysis, collaboration, and incident response. The architectural overview of the framework demonstrates its key components and their functionalities. The proposed framework incorporates the Malware Information Sharing Platform (MISP) as the core platform for storing and managing cyber threat intelligence data. Amazon Web Services (AWS) are integrated to enhance scalability, security, and data processing capabilities.
The workflows encompass data ingestion, analysis, collaboration, and incident response processes, showcasing how the framework enables seamless sharing and collaboration among participating schools. The paper discusses the rationale behind the design decisions, emphasizing how the framework addresses the unique challenges faced by schools in managing cyber threats. While the prototype implementation is left for future work, the architectural design and workflows provide a foundation for understanding the framework's structure, functionality, and potential benefits for educational institutions. This research contributes to the field by presenting a comprehensive architectural design and workflows that enable effective sharing and collaboration of cyber threat intelligence among schools, fostering a collective and proactive approach to cybersecurity in the educational sector.