# Blockchain-Based Model for Incentivized Cyber Threat Intelligence Sharing
## 4 Experimental Evaluation and Discussion
### Results and Discussion
Third, they did not offer discounts for CTI data consumers, meaning that CTI data consumers were not motivated to actively participate in the CTI data-sharing process. Our proposed model maintains the reputation of all participants in the network, including CTI data producers and consumers, as both roles are interchangeable. The maintenance of the reputation system increases the users' trust in the CTI data-sharing process. The next feature of our innovation is the algorithm for calculating reward scores. The proposed algorithm is based on a large number of variables. To explore the relationship between different variables, we conducted an evolutionary simulation for selected values when the number of participants increased. The result of the simulation showed that the selected values and the proposed algorithm are in accordance with economic laws. Hence, we can conclude that the proposed algorithm for reward score calculation motivates users to share CTI data. Simulation was also used as a tool by other researchers in the field [12; 13; 18; 23]. [PERSON] et al. [12] used a Monte Carlo simulation to check the viability of their proposed incentivized CTI data-sharing model. [PERSON] and [PERSON] [13] verified the influence of malicious contributors using simulation, although the simulation scheme and tools were not discussed. [PERSON] and [PERSON] [18] used a probabilistic simulation to check the tolerance of the proposed algorithm against malicious validators. [PERSON] et al. [23] applied an evolutionary simulation in MATLAB to check the impact of the proposed incentive strategy. The final distinguishing feature of our innovation is the implementation of TLP for CTI data sharing. Of all of the reviewed studies in the field of incentivized CTI data sharing, only [PERSON] et al. [19] considered the implementation of the TLP. The authors discussed the implementation of four channels: white, green, amber, and red. [PERSON] et al. [19] observed that data can be freely disclosed outside the network in the white channel. However, they did not provide details on how the data can be disclosed outside of the network when a permissioned blockchain is used. We implemented five channels for CTI data disclosure, according to the latest version of the TLP [30], as five colors are now available. A summary of the discussion is provided in Table 4. The asterisk (*) used means that the feature was implemented. \begin{table}
\begin{tabular}{c c c c c c c c c c} \hline \hline \multirow{3}{*}{**Reference**} & \multirow{3}{*}{\begin{tabular}{c} **Prototype** \\ **Implemented** \\ \end{tabular} } & \begin{tabular}{c} **View of** \\ **Prototype** \\ **Presented** \\ \end{tabular} & \begin{tabular}{c} **Incentive** \\ **Reputation** \\ \end{tabular} & \begin{tabular}{c} **Incentive** \\ **Monetary** \\ \end{tabular} & \begin{tabular}{c} **Sharing of** \\ **Sensitive** \\ **Data** \\ \end{tabular} & \begin{tabular}{c} **Implementation** \\ **of TLP** \\ \end{tabular} & \
\begin{tabular}{c} **Sharing of** \\ **Large Data** \\ \end{tabular} &
\begin{tabular}{c} **Simulation** \\ **Used** \\ \end{tabular} \\ \hline [PERSON] et al. [11] & & & & * & & * & & & & & * \\ [PERSON] et al. [12] & * & & & * & & & & & * \\ [PERSON] and [PERSON] [13] & & & & * & & & & & * \\ [PERSON] et al. [14] & * & & & * & & & & & * \\ [PERSON] et al. [15] & * & & & * & & & & & * \\ [PERSON] and [PERSON] [16] & * & & & & * & & & & \\ [PERSON] & & & * & & & & & * \\ and [PERSON] [18] & & & & * & & * & & * \\ [PERSON] et al. [19] & & & & * & & & & * \\ [PERSON] et al. [21] & * & & & * & & & & & * \\ [PERSON] et al. [23] & & & & * & & & & & * \\ Proposed model & * & * & * & * & * & * & * & * \\ \hline \hline \end{tabular}
\end{table} 
Table 4: Comparison with other incentive models. The summary of implemented features presented in Table 4 clearly indicates the superiority of our proposed model, compared to existing incentive models in the field.