Zobrazit v EDS

Hafnium and the zero-day dilemma. Public-private cyber threat intelligence cooperation

Uloženo v:
Podrobná bibliografie
Název: Hafnium and the zero-day dilemma. Public-private cyber threat intelligence cooperation
Autoři: Mihai OLTEANU
Zdroj: Bulletin of "Carol I" National Defense University, Vol 14, Iss 3 (2025)
Informace o vydavateli: Carol I National Defence University Publishing House, 2025.
Rok vydání: 2025
Sbírka: LCC:Military Science
LCC:International relations
Témata: Cyber Threat Intelligence, Hafnium, Zero-day Vulnerabilities, Public-private Cooperation., Military Science, International relations, JZ2-6530
Popis: Cyber threat intelligence (CTI) plays a crucial role in limiting cybersecurity risks, with a particular focus on identifying and mitigating zero-day vulnerabilities. While academic literature, specialized reports, and normative documents widely argue in favor of cooperation between public and private entities to develop cybersecurity, significant systemic challenges hinder effective intelligence sharing when discussing real-time threats, such as zero-day vulnerabilities. This article critically examines the dynamics of public-private collaboration in CTI, focusing on the obstacles preventing further development of the level of cooperation, such as trust deficits, legal constraints, financial and reputational risks, and diverging strategic interests. By performing a qualitative analysis on the existing literature and using the Hafnium cyberattack as a case study, the research highlights the complexities surrounding the zero-day vulnerability disclosures and the limitations of existing cooperative frameworks. The findings indicate that while structured CTI-sharing mechanisms exist, real-time collaboration on zero-day vulnerabilities remains constrained by competing incentives that are unlikely to be properly addressed.
Druh dokumentu: article
Popis souboru: electronic resource
Jazyk: English
ISSN: 2284-936X
2284-9378
Relation: https://revista.unap.ro/index.php/bulletin/article/view/2241; https://doaj.org/toc/2284-936X; https://doaj.org/toc/2284-9378
DOI: 10.53477/2284-9378-25-52
Přístupová URL adresa: https://doaj.org/article/138dbfc722a24a53b4090b073118a07d
Přístupové číslo: edsdoj.138dbfc722a24a53b4090b073118a07d
Databáze: Directory of Open Access Journals
Popis
Abstrakt:Cyber threat intelligence (CTI) plays a crucial role in limiting cybersecurity risks, with a particular focus on identifying and mitigating zero-day vulnerabilities. While academic literature, specialized reports, and normative documents widely argue in favor of cooperation between public and private entities to develop cybersecurity, significant systemic challenges hinder effective intelligence sharing when discussing real-time threats, such as zero-day vulnerabilities. This article critically examines the dynamics of public-private collaboration in CTI, focusing on the obstacles preventing further development of the level of cooperation, such as trust deficits, legal constraints, financial and reputational risks, and diverging strategic interests. By performing a qualitative analysis on the existing literature and using the Hafnium cyberattack as a case study, the research highlights the complexities surrounding the zero-day vulnerability disclosures and the limitations of existing cooperative frameworks. The findings indicate that while structured CTI-sharing mechanisms exist, real-time collaboration on zero-day vulnerabilities remains constrained by competing incentives that are unlikely to be properly addressed.
ISSN:2284936X
22849378
DOI:10.53477/2284-9378-25-52