Designing a Formal Model Facilitating Collaborative Information Sharing for Community Cyber Security

Communities are becoming more vulnerable to cyber attacks as their reliance on critical cyber infrastructures is growing. Due to the interdependency among different cyber infrastructures, collaborative information sharing is necessary and important to help a community detect potential risks, prevent cyber attacks at an early stage, and facilitate incident response as well as preparedness activities in communities. In this paper we propose a group-centric collaborative information sharing framework that aims to improve community cyber security. By analyzing specific information sharing requirements in the community, we design a formal policy model for this framework. Our model is illustrated by several information sharing scenarios in the community.