zenodoopen

What's in a Cyber Threat Intelligence sharing platform? - Appendix

This upload contains the Artificats i.e. surveys and answer datasets for our ACSAC 2021 paper. Full paper reference: Borce Stojkovski, Gabriele Lenzini, Vincent Koenig, and Salvador Rivas. 2021. What’s in a Cyber Threat Intelligence sharing platform?: A mixed-methods user experience investigation of MISP. In Annual Computer Security Applications Conference (ACSAC ’21), December 6–10, 2021, Virtual Event, USA. ACM, New York, NY, USA. https://doi.org/10.1145/3485832.3488030 The research is supported by the Luxembourg National Research Fund through grant PRIDE15/10621687/SPsquared   +++++++++++++++++++++++++++++++++++++++ I) CONTENT: +++++++++++++++++++++++++++++++++++++++ A - Surveys |_ "1 - UEQ+demographics.pdf"  |_ "2 - Sentence Completion.pdf" B - Raw participant data |_ "1 - UEQ.csv" |_ "2 - MISP - SC-Q1.csv" |_ "2 - MISP - SC-Q2.csv" |_ "2 - MISP - SC-Q3.csv" |_ "2 - MISP - SC-Q4.csv" |_ "2 - MISP - SC-Q5.csv" |_ "2 - MISP - SC-Q6.csv" |_ "2 - MISP - SC-Q7.csv" |_ "2 - MISP - SC-Q8.csv" +++++++++++++++++++++++++++++++++++++++ II) DETAILS: +++++++++++++++++++++++++++++++++++++++ --------------------------------------- A - Surveys / 1 - UEQ+demographics.pdf --------------------------------------- - The file consists of two sections, namely the UEQ (page 1) and the Demographics part (pages 2-3).  - The User Experience Questionnaire (UEQ) is a validated instrument for measuring the user experience of interactive products that consists of 6 scales with 26 items in total [2]. For more information refer to the UEQ handbook [2] or to Section 4.1 of our paper. - The Demographics part consists of 15 questions investigating the types of users and their respective needs on the MISP platform.   --------------------------------------- A - Surveys / 2 - Sentence Completion.pdf --------------------------------------- - The file consists of 8 questions i.e. sentence completion stems presented to our study participants as explained in Section 4.1 of our paper. --------------------------------------- B - Raw participant data / "1 - UEQ.csv" --------------------------------------- The file contains the (annonymized) raw participant data corresponding to the UEQ and demographics sections of the survey (file: "A - Surveys / 1 - UEQ+demographics.pdf"). It consists of the following fields: - Participant ID - 26 values (Q-ID 1.1 .. 1.26) corresponding to the 26 items of the UEQ scale - 8 values (Q-ID 2.1.1 .. 2.1.8) corresponding to the Demographics question No. 1 ("Which of the following roles best describes how you (intend to) use MISP?") - 14 values (Q-ID 2.2.1 .. 2.2.14) correspondign to the Demographics question No. 2. ("Which of the following categories best describes the organization you work in?") - 1 value (Q-ID 2.3) corresponding to the Demographics question No. 3 ("How long have you been using MISP?") - 1 value (Q-ID 2.4) corresponding to the Demographics question No. 4 ("If applicable, how often do you use MISP?") - 1 value (Q-ID 2.5) corresponding to the Demographics question No. 5 ("Have you attended a training session on MISP before?") - 1 value (Q-ID 2.6) corresponding to the Demographics question No. 6 ("Have you used the MISP training materials before?") - 1 value (Q-ID 2.7) corresponding to the Demographics question No. 7 ("Have you used the MISP virtual machine before? ") - 1 value (Q-ID XTR2.1) corresponding to the Demographics question No. 8 ("Have you used PyMISP - the Python library to access MISP via the API before? ") - 1 value (Q-ID XTR2.2) corresponding to the Demographics question No. 9 ("Have you cloned a MISP repository before? ") - 1 value (Q-ID XTR2.3) corresponding to the Demographics question No. 10 ("Have you contributed to any of the MISP repositories before? ") - 1 value (Q-ID 2.8) corresponding to the Demographics question No. 11 ("Do you have an engineering or computer science background? ") - 1 value (Q-ID 2.9) corresponding to the Demographics question No. 12 ("What is the highest level of school you have completed / degree you have received? ") - 1 value (Q-ID 2.10) corresponding to the Demographics question No. 13 ("What is your age group?") - 1 value (Q-ID 2.11) corresponding to the Demographics question No. 14 ("To which gender identity do you most identify?") --------------------------------------- B - Raw participant data / "2 - SC-Q[1..8].csv" --------------------------------------- The 8 files contain the raw participant responses to the different sentence completion questions (see file: "A - Surveys / 2 - Sentence Completion.pdf"). Each file consists of two fields: - Participant ID  - 1 value for the sentence completion input. For instance, the file "2 - SC-Q1.csv" corresponds to the Sentence completion stem "When I use MISP, I feel …". Similarly, "2 - SC-Q2.csv" corresponds to the Sentence completion stem "MISP is best for …". The same logic applies to all 8 files ("2 - SC-Q[1..8].csv"). REFERENCES: [1] MISP. 2021. MISP - Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing. Retrieved August 15, 2021 from https://www.misp-project.org [2] UEQ. 2021. User Experience Questionnaire. Retrieved August 15, 2021 from https://www.ueq-online.org/ [3] UEQ. 2021. User Experience Questionniare Handbook. Version 8 (31.12.2019). Retrieved August 15, 2021 from: https://www.ueq-online.org/Material/Handbook.pdf

ShareScore

40/100

Overall dataset sharing score

Score breakdown

These five areas show where the dataset supports — or may limit — practical reuse.

Stewardship: 8
Harmonization: 4
Access: 16
Reuse readiness: 8
Engagement: 4

Topics

usable security cyber threat intelligence CTI user studies user experience sharing platforms information sharing