Cyber threat information sharing between organizations evaluations and suggestions

Cyber attacks, threats or breaches targeting entities in cyberspace are among the main challenges faced by organizations. Information about cyber threats is needed to overcome these difficulties and to detect and prevent these threats. Cooperation in sharing the cyber threats is great importance in combating possible threats. In this thesis; the studies on cyber threat information sharing in our country were examined. It was evaluated that the cyber threat information sharing activities of our country's institutions should be increased, the cooperation and collaboration activities should be improved, expanded and included not only in the guidelines but also included in the national strategies and action plans. In addition, the most widely used world approaches to sharing threat information, the USA, the EU and UK were examined. As a result, it was suggested that a collaboration platform for organisations (institutions, units or companies) should be developed and cyber threat information or intelligence (CTI) is shared in this platform among those in real time. In addition, the Zack Knowledge Gap (ZKG) model was used for analyzing and determining the needs of CTIs in order for organizations to prevent advanced cyber threats and eliminating the deficiencies in their structures. By making use of Maslow's Hierarchy of Needs (MHN), recommendations and suggestions based on CTIs were made to determine the points that organizations or countries can benefit in preventing advanced cyber threats. Moreover, new models were proposed, new analysis were made, and evaluatoins and suggestions were presented. It can be concluded that the results of ZKG and MHN analyses might help to improve our perceptions and perspective to CTIs. As a result; with the cooperation model, which is examined within the scope of this thesis and proposed to be created in our country on CTI sharing, an ecosystem where stakeholders can share experiences and threats will be created, and it will be easier to combat cyber threats collectively and securely. It will be also possible to develop better products, strategies, plans, defence mechanisms, and R&D studies against cyber attacks more than before. With the issues proposed within the scope of this thesis, cyber security capacity and skill development can be increased, potential threats can be investigated comprehensively and handled easily, better prevention and protection can be achieved for advanced threats in homelands.