Published By: eWeek Posted By: Eric Lubow 1/13/2003
Two Harvard University security researchers have developed a model showing that enterprises that share their sensitive data about network attacks and security breaches are less attractive targets and, hence, less likely to be attacked. The paper, to be presented later this month at the Financial Cryptography conference in Gosier, Guadeloupe, supports the U.S. government's contentions about the importance of sharing attack data. But it also concludes that many of the benefits that can accrue from such an arrangement won't be realized soon.
"I absolutely believe that there's value in information sharing, and I think that value will grow," said Stuart Schechter, a doctoral candidate in computer science at Harvard, in Cambridge, Mass., and co-author of the paper. "I think the change [toward information sharing] will be driven by insurance companies, who will offer lower premiums for companies that share."