## 3 Sharing ML Models as Cyber Threat Intelligence
### Sharing ML Models as Threat Intelligence
In Proceedings of the 13 th USENIX Conference on System Administration (LISA '99), Seattle, WA, USA, 7-12 November 1999; pp. 229-238. * [PERSON] and [PERSON] (2017) [PERSON]; [PERSON] [PERSON] Performance Comparison and Detection Analysis in Snort and Suricata Environment. _Wirel. Pers. Commun._**2017**, _94_, 241-252. [CrossRef]
* [PERSON] et al. (2006) [PERSON]; [PERSON]; [PERSON] _Bro Intrusion Detection System;_ Technical Report; Lawrence Berkeley National Laboratory: Berkeley, CA, USA, 2006. * [PERSON] et al. (2018) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Decaying Indicators of Compromise. _arXiv_**2018**, arXiv:1803.11052. * [PERSON] et al. (2019) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Taxonomy driven indicator scoring in MISP threat intelligence platforms. _arXiv_**2019**, arXiv:1902.03914. * [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Cybersecurity data science: An overview from machine learning perspective. _J. Big Data_**2020**, \(7\), 41. [CrossRef]
* [PERSON] et al. (2012) [PERSON]; [PERSON]; [PERSON]. Intrusion Detection System using decision tree algorithm. In Proceedings of the 2012 IEEE 14 th International Conference on Communication Technology, Chengdu, China, 9-11 November 2012; pp. 629-634. [CrossRef]
* [PERSON] et al. (2012) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] An efficient intrusion detection system based on support vector machines and gradually feature removal method. _Expert Syst. Appl._**2012**, _39_, 424-430. doi:10.1016/j.eswa.2011.07.032. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON]; [PERSON] CANN: An intrusion detection system based on combining cluster centers and nearest neighbors. _Knowl.-Based Syst._**2015**, _78_, 13-21. doi:10.1016/j.knosys.2015.01.009. [CrossRef]
* [PERSON] and [PERSON] (2016) [PERSON]; [PERSON] [PERSON] A novel SVM-kNN-PSO ensemble method for intrusion detection system. _Appl. Soft Comput._**2016**, _38_, 360-372. doi:10.1016/j.asoc.2015.10.011. [CrossRef]
* [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON] A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks. _IEEE Access_**2017**, \(5\), 21954-21961. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] A survey of data mining and machine learning methods for cyber security intrusion detection. _IEEE Commun. Surv. Tutor._**2015**, _18_, 1153-1176. [CrossRef]
* [PERSON] and [PERSON] (2019) [PERSON]; [PERSON] Machine learning and deep learning methods for intrusion detection systems: A survey. _Appl. Sci._**2019**, \(9\), 4396. [CrossRef]
* [PERSON] and [PERSON] (2020) [PERSON]; [PERSON] [PERSON] Deep learning methods in network intrusion detection: A survey and an objective comparison. _J. Netw. Comput. Appl._**2020**, _169_, 102767. doi:10.1016/j.jnca.2020.102767. [CrossRef]
* [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON]; [PERSON] Deep learning at the shallow end: Malware classification for non-domain experts. _Digit. Investig._**2018**, _26_, S118-S126. doi:10.1016/j.dim.2018.04.024. [CrossRef]
* [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Robust intelligent malware detection using deep learning. _IEEE Access_**2019**, \(7\), 46717-46738. [CrossRef]
* [PERSON] and [PERSON] (2020) [PERSON]; [PERSON]; [PERSON] [PERSON] The rise of machine learning for detection and classification of malware: Research developments, trends and challenges. _J. Netw. Comput. Appl._**2020**, _153_, 102526. doi:10.1016/j.jnca.2019.102526. [CrossRef]
* [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON] [PERSON] DL-Droid: Deep learning based android malware detection using real devices. _Comput. Secur._**2020**, _89_, 101663. [CrossRef]
* [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] D3.3: Research Challenges and Requirements to Manage Digital Evidence. H2020 CyberSec4 Europe Deliverables.