@article {701, title = {Peer-to-Peer Enclaves for Improving Network Defence}, journal = {Technology Innovation Management Review}, volume = {3}, year = {2013}, month = {07/2013}, pages = {19-24}, publisher = {Talent First Network}, address = {Ottawa}, abstract = {Information about cyberthreats within networks spreads slowly relative to the speed at which those threats spread. Typical "threat feeds" that are commercially available also disseminate information slowly relative to the propagation speed of attacks, and they often convey irrelevant information about imminent threats. As a result, hosts sharing a network may miss opportunities to improve their defence postures against imminent attack because needed information arrives too late or is lost in irrelevant noise. We envision timely, relevant peer-to-peer sharing of threat information {\textendash} based on current technologies {\textendash} as a solution to these problems and as a useful design pattern for defensive cyberwarfare. In our setting, network nodes form communities that we call enclaves, where each node defends itself while sharing information on imminent threats with peers that have similar threat exposure. In this article, we present our vision for this solution. We sketch the architecture of a typical node in such a network and how it might interact with a framework for sharing threat information; we explain why certain defensive countermeasures may work better in our setting; we discuss current tools that could be used as components in our vision; and we describe opportunities for future research and development.}, keywords = {cyber countermeasures, cybersecurity, dynamic cyberdefence, enclave computing, network defence, peer-to-peer}, issn = {1927-0321}, doi = {http://doi.org/10.22215/timreview/701}, url = {http://timreview.ca/article/701}, author = {David W. Archer and Adam Wick} }