## 3 Sharing ML Models as Cyber Threat Intelligence
### Sharing ML Models as Threat Intelligence
[CrossRef]
* [2] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] _Guide to Cyber Threat Information Sharing_; Technical Report; National Institute of Standards and Technology: Gaithersburg, MD, USA, 2016. * [3] [PERSON]; [PERSON] A survey on technical threat intelligence in the age of sophisticated cyber attacks. _Comput. Secur._**2018**, 72, 212-233. [CrossRef]
* [4] [PERSON]; [PERSON]; [PERSON]; [PERSON] A Novel Trust Taxonomy for Shared Cyber Threat Intelligence. _Secur. Commun. Netw._**2018**, _2018_. [CrossRef]
* [5] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] NoDoze: Combatting Threat Alert Fatigue with Automated Provenance Triage. In Proceedings of the 26 th Annual Network and Distributed System Security Symposium, NDSS 2019, San Diego, CA, USA, 24-27 February 2019. * [6] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Automated Threat-Alert Screening for Battling Alert Fatigue with Temporal Isolation Forest. In Proceedings of the 2019 17 th International Conference on Privacy, Security and Trust (PST), Fredericton, NB, Canada, 26-28 August 2019; pp. 1-3. [CrossRef]
* [7] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Reading the Tea Leaves: A Comparative Analysis of Threat Intelligence. In Proceedings of the 28 th USENIX Conference on Security Symposium (SEC'19), Santa Clara, CA, USA, 14-16 August 2019; pp. 851-867. * [8] [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] A different cup of TI? The added value of commercial threat intelligence. In Proceedings of the 29 th USENIX Security Symposium, San Diego, CA, USA, 12-14 August 2020; [PERSON], [PERSON], Eds. ; USENIX Association: Berkeley, CA, USA, 2020; pp. 433-450. * [9] [PERSON]; [PERSON] Peeking Inside the Black-Box: A Survey on Explainable Artificial Intelligence (XAI). _IEEE Access_**2018**, 6, 52138-52160. [CrossRef]
* [10] [PERSON]; [PERSON]; [PERSON] Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. _arXiv_**2018**, arXiv:1802.00420. * [11] [PERSON]; [PERSON]; [PERSON] STIX Version 2.1. OASIS Committee Specification Draft 01/Public Review Draft 01. 2019. Available online: [[https://docs.oasis-open.org/cti/stix/v2.1/stix-v2.1.html](https://docs.oasis-open.org/cti/stix/v2.1/stix-v2.1.html)]([https://docs.oasis-open.org/cti/stix/v2.1/stix-v2.1.html](https://docs.oasis-open.org/cti/stix/v2.1/stix-v2.1.html)) ( accessed on 24 February 2021). * [12] [PERSON]; [PERSON] TAXII Version 2.1. OASIS Committee Specification Draft 04/Public Review Draft 03. 2019. Available online: [[https://docs.oasis-open.org/cti/taxii/v2.1/taxii-v2.1.html](https://docs.oasis-open.org/cti/taxii/v2.1/taxii-v2.1.html)]([https://docs.oasis-open.org/cti/taxii/v2.1/taxii-v2.1.html](https://docs.oasis-open.org/cti/taxii/v2.1/taxii-v2.1.html)) ( accessed on 24 February 2021). * [13] [PERSON]; [PERSON]; [PERSON]; ; [PERSON] CybOX Version 2.1.1. Part 01: Overview. OASIS Committee Specification Draft 01/Public Review Draft 01. 2016. Available online: [[http://docs.oasis-open.org/cti/cybox/v2.1.1/cybox-v2.1.1-part01-overview.html](http://docs.oasis-open.org/cti/cybox/v2.1.1/cybox-v2.1.1-part01-overview.html)]([http://docs.oasis-open.org/cti/cybox/v2.1.1/cybox-v2.1.1-part01-overview.html](http://docs.oasis-open.org/cti/cybox/v2.1.1/cybox-v2.1.1-part01-overview.html)) ( accessed on 24 February 2021). * [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON] [PERSON] A Comparative Analysis of Cyber-Threat Intelligence Sources, Formats and Languages. _Electronics_**2020**, \(9\), 824. [CrossRef]
* [PERSON] et al. (2016) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] MISP: The Design and Implementation of a Collaborative Threat Intelligence Sharing Platform. In Proceedings of the 2016 ACM on Workshop on Information Sharing and Collaborative Security (WISTCS '16), Vienna, Austria, 24 October 2016; pp. 49-56. [CrossRef]
* [PERSON] (1999) [PERSON] Snort--Lightweight Intrusion Detection for Networks.