Trusted Third Party Broker for Collection and Private Sharing of Successful Computer Security Practices

At least one non-transitory computer readable medium for a trusted third party broker to collect information concerning successful computer security practices from a plurality of source organizations, and to share collected information at an inter-organizational level privately, the at least one non-transitory computer readable medium storing computer executable instructions that, when loaded into computer memory and executed by at least one processor of at least one computing device, cause the at least one computing device to perform the following steps:

• receiving information concerning empirically successful computer security practices, from a plurality of remote computers associated with a plurality of source organizations, wherein different ones of the empirically successful computer security practices are being used at different ones of the plurality of source organizations;
• amalgamating the information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations;
• analyzing the amalgamated information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations;
• identifying specific information concerning empirically successful computer security practices to share with at least one specific target organization, based on analyzing the amalgamated information;
• removing source information from the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization;
• and
• providing the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization, with the source information removed, wherein the at least one target organization does not receive information identifying the source of the provided information concerning empirically successful computer security practices.

A computer system for a trusted third party broker to collect information concerning successful computer security practices from a plurality of source organizations, and to share collected information at an inter-organizational level privately, the computer system comprising:

• a processor;
• system memory;
• an information receiving module residing in the system memory, the information receiving module being programmed to receive information concerning empirically successful computer security practices, from a plurality of remote computers associated with a plurality of source organizations, wherein different ones of the empirically successful computer security practices are being used at different ones of the plurality of source organizations;
• an amalgamating module residing in the system memory, the amalgamating module being programmed to amalgamate the information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations;
• an analyzing module residing in the system memory, the analyzing module being programmed to analyze the amalgamated information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations;
• an identifying module residing in the system memory, the identifying module being programmed to identify specific information concerning empirically successful computer security practices to share with at least one specific target organization, based on analyzing the amalgamated information;
• an anonymizing module residing in the system memory, the anonymizing module being programmed to remove source information from the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization;
• and
• an information providing module residing in the system memory, the information providing module being programmed to provide the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization, with the source information removed, wherein the at least one target organization does not receive information identifying the source of the provided information concerning empirically successful computer security practices.