Exchanging and acting on security events at an enterprise using permissioned blockchain

A system for exchanging and acting on detected security events using permissioned blockchain, comprising:

• at least one server computing device;
• and
• program instructions stored in memory and executable in the at least one server computing device that, when executed by the at least one server computing device, direct the at least one server computing device to:
• obtain a unique identifier for a client device in response to a detected security event being identified on the client device, the unique identifier being obtained from a device identity service;
• send security event data associated with the detected security event to a plurality of nodes of a blockchain service, the nodes being associated with a respective one of a plurality of computer security services and being configured to validate the security event data and endorse the security event data in response to predetermined criteria being satisfied;
• in response to the security event data being validated by the nodes, publish the security event data into the blockchain service as a block that is broadcasted to the nodes, wherein individual ones of the nodes are configured to store the security event data of the block in a local ledger;
• and
• assign a level of access to data stored in the blockchain service to the individual ones of the computer security services based on a metric value determined for the corresponding one of the computing security services.

A non-transitory computer-readable medium for exchanging and acting on detected security events using permissioned blockchain comprising program instructions that, when executed by at least one computing device, direct the at least one computing device to:

• obtain a unique identifier for a client device in response to a detected security event being identified on the client device, the unique identifier being obtained from a device identity service;
• send security event data associated with the detected security event to a plurality of nodes of a blockchain service, the nodes being associated with a respective one of a plurality of computer security services and being configured to validate the security event data and endorse the security event data in response to predetermined criteria being satisfied;
• in response to the security event data being validated by the nodes, publish the security event data into the blockchain service as a block that is broadcasted to the nodes, wherein individual ones of the nodes are configured to store the security event data of the block in a local ledger;
• and
• assign a level of access to data stored in the blockchain service to the individual ones of the computer security services based on a metric value determined for the corresponding one of the computing security services.