Assessing Quality of Contribution in Information Sharing for Threat Intelligence

In this work, we introduce the notion of quality of indicators (QoI) for assessing contribution of participants in information sharing for threat intelligence. We exemplify this notion through various metrics, including correctness, relevance, utility, and uniqueness of indicators. We conducted an empirical study using a benchmark to define quality metrics, and were able to unveil various interesting observations, including the ability to spot low quality contributions that are synonym to free riding in threat information sharing.