Threat intelligence sharing is an important countermeasure against the increasing number of security threats to which companies and governments are exposed. Its objective is the cross-organizational exchange of information about actual and potential threats. In recent years, a heterogeneous market of threat intelligence sharing platforms (TISPs) has emerged. These platforms are inter-organizational systems that support collaborative collection, aggregation, analysis and dissemination of threat-related information. Organizations that consider using TISPs are often faced with the challenge of selecting suitable platforms. To facilitate the evaluation of TISPs, we present a framework for analyzing and comparing relevant TISPs. Our framework provides a set of 25 functional and non-functional criteria that support potential users in selecting suitable platforms. We demonstrate the applicability of our evaluation framework by assessing three platforms: MISP, OTX and ThreatQ. We describe common features and differences between the three platforms.

Die Earned-Value-Analyse (EVA) ist ein Verfahren, mit dessen Hilfe der Fortschritt von IT-Projekten kontrolliert und prognostiziert werden kann. Die EVA beinhaltet ein Kennzahlensystem zur Bewertung der Leistung eines Projektes während der Projektlaufzeit. Sie bietet die Möglichkeit, Zeit-, Kosten- und Leistungstrends in einer Darstellung zusammenzufassen. Obwohl die EVA im anglo-amerikanischen Sprachraum in vielen IT-Projekten zur Anwendung kommt und in verschiedenen Leitfäden und Standards empfohlen wird, scheint dieses Verfahren in deutschen IT-Projekten noch wenig verbreitet zu sein. Dieser Beitrag stellt die wichtigsten Kennzahlen der EVA vor, ordnet das Verfahren in gängige Leitfäden zum IT-Projektmanagement ein und gibt Hinweise zur praktischen Anwendung sowohl für einzelne Projekte als auch für ein Projektportfolio bzw. das Multiprojektmanagement.

The impact of digital libraries on information processes is steadily growing. Today, a rapidly increasing number of digital libraries with various characteristics are available. Business models for digital libraries evolve from mere content providers to sophisticated service suppliers. They offer a rich variety of information services combined with collaboration, e-learning and portal features. Traditional classification schemes for digital libraries do not sufficiently take this development into account or fail to meet it at all. In this paper we present a novel approach to the classification of digital libraries. It is based on business model characteristics with special emphasis on the evolution of digital libraries from content to information service providers. Our classification approach helps suppliers to communicate benefits and features of their libraries more effectively. It also supports customers when selecting an appropriate digital library.