Alexandre Dulaunoy · @adulau

1112 followers · 97 posts · Server infosec.exchange

At @circl , @misp and hashlookup.io, we have seen various use-cases of information sharing in threat-intelligence community. We have seen an increase of need to have the ability to share information without actually disclosing the information.We saw many clever techniques but also complex model to share such information. So we designed a new simple format called Private Search Set (PSS) which will be integrated in the open source we are maintaining. It's a work-in-progress, I'll update the repo in the next days. Feedback is more than welcome.

Private Search Set (PSS)

Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.

Features

Fast lookup of values (such as indicators, hashes or any text) without disclosing the values
Easily distribute private sets to a group of users or organisations
Watermarking and tracking down potential leak of a private search set (PSS)
Offline private search
Flexible meta-format to describe and extend the private search set (PSS)

:github: https://github.com/hashlookup/private-search-set

#threatintel #threatintelligence #informationsharing #opensource #mispel