Gartner Blog Network


On Security Data Sharing Research

by Anton Chuvakin  |  February 10, 2013  |  3 Comments

As I promised in my post On Security Data Sharing, we are starting a new research project on information security data sharing. Specifically, our research (joint with Dan Blum) will focus on how organizations can benefit from shared security data, what types of data can/should be shared, what are the barriers to sharing, what methods and protocols can be used and, most importantly, how to share/receive security data for enhancing your security defenses. We will look at the new commercial data sharing providers (RedSky, SecurityStarfish), ISACs (FS-, REN- … any others still alive?), and other organizations and will try to learn from both successes and failures (of which there are plenty, BTW).

So, here is my next call to action:

  • We have requested briefings from two commercial data sharing service providers and some ISACs. Other vendors, if you think you are closely related to security data sharing, got anything to say about it?  Here is a briefing link … you know what to do.
  • Enterprises, got a data sharing-related story to ..well… share? Hit the comments or email me privately (Gartner client NDA will cover it, if you are a client).

Related posts:

Additional Resources

Read Complimentary Relevant Research

Five Golden Rules for Creating Effective Security Policy

Policy writing is a risk communication exercise that is frequently performed by people who lack the skills needed to create good security...

View Relevant Webinars

Fundamental Principles of Software Asset Management

Whether you've got too much software or not enough, uncontrolled software costs are a drain on your IT department, consuming resources...

Category: data  security  sharing  

Tags: data-sharing  security  

Anton Chuvakin
Research VP and Distinguished Analyst
5+ years with Gartner
17 years IT industry

Anton Chuvakin is a Research VP and Distinguished Analyst at Gartner's GTP Security and Risk Management group. Before Mr. Chuvakin joined Gartner, his job responsibilities included security product management, evangelist… Read Full Bio


Thoughts on On Security Data Sharing Research


  1. Glenn Merrell, CAP says:
    February 13, 2013 at 6:33 pm

    Anton,
    This should be a productive and interesting discussion. I am interested to hear the differences between commercial information sharing for a fee, and information sharing from a funded organization serving the needs of Critical Infrastructure protection.

    Cheers!
    Glenn Merrell, CAP
    ICS-ISAC.org Workforce Development Director / Advisor

  2. Anton Chuvakin says:
    February 14, 2013 at 12:29 pm

    First, thanks for the comment. If you are involved with ICS-ISAC, would you consider briefing us on its status, etc via http://www.gartner.com/it/about/vbriefings_faq.jsp

    Second, we’d be exploring this (commercial vs “public” sharing) and other issues in this multi-decade saga (started in 1998 with PDD63 if not earlier) towards information sharing.

  3. On Trust in Security Data Sharing says:
    February 20, 2013 at 4:14 pm

    […] On Security Data Sharing Research […]



Comments are closed

Comments or opinions expressed on this blog are those of the individual contributors only, and do not necessarily represent the views of Gartner, Inc. or its management. Readers may copy and redistribute blog postings on other blogs, or otherwise for private, non-commercial or journalistic purposes, with attribution to Gartner. This content may not be used for any other purposes in any other formats or media. The content on this blog is provided on an "as-is" basis. Gartner shall not be liable for any damages whatsoever arising out of the content or use of this blog.