Valuing Cybersecurity Research Datasets

Abstract

Cybersecurity research datasets are incredibly valuable, yet efforts to broaden their availability have had limited success. This paper investigates why and advances under-standing of paths forward using empirical data from a successful sharing platform. We start by articulating the benefits of collecting and sharing research datasets, followed by discussing key barriers that inhibit such efforts. Using extensive data on IMPACT,a long-running cybersecurity research data sharing platform, we identify factors that affect the popularity of datasets. We examine over 2,000 written explanations of in-tended use to identify patterns in how the datasets are used. Finally, we derive a quantitative estimate of the financial value of sharing on the platform based on the costs of collection avoided by requesters.

Keywords: cybersecurity, research & development, law, data sharing, security economics, incentives