A Reference Model for Cyber Threat Intelligence (CTI) Systems
, Panagiotis Fouliras 1, Ioannis Mavridis 1 and Panagiotis Sarigiannidis 2Round 1
Reviewer 1 Report
This paper discusses CTI complexity factors, proposes a set of definitions of the CTI key concepts and an eight-layer CTI Reference Model as a base for CTI systems design. Also, the proposed reference model is validated by applying it to three case studies, producing the respective CTI Reference Architectures.
Line 26-32] This block is repeated twice.
Section 2] Is it possible to describe a relationship between the defined entities, e.g., via a block diagram connecting them?
Line 269] Double "T" typo
Table 1] Could you add a second column to provide a small description about each standard?
Figure 3] "Tactilcal" typo
Section 5] How did you identify the functions in each case study during the validation phase? In general, I think the validation section should explain better the approach.
Table 3] Why did you consider only 3 Open-Source CTI systems? Could you also consider commercial ones?
Author Response
Please see the attachment.
Author Response File: 
Author Response.pdf
Reviewer 2 Report
This paper discusses CTI complexity factors, proposes a set of definitions of the CTI key concepts and an eight-layer CTI Reference Model as a base for CTI systems design. The topic is interesting. Some comments are given as follows:
- The introduction can be enriched. More background should be included. The motivation of this work should be highlighted. The main contributions should be listed at the end of introduction.
- What are the innovations of the method used?
- Three case studies are considered. What is the main difference between them?
Author Response
Please see the attachment.
Author Response File: Author Response.pdf
Round 2
Reviewer 2 Report
The authors have carefully revised. I have no further comments.
