The reluctance to share may also be a challenge for Carbon Black. Companies prefer to keep data private and fear revealing too much, Johnson said, which is why contributors can chose to share on its platform anonymously. But he maintains it's useful at a time when IT security talent is scarce.
“Small companies can understand what big companies are seeing and vice-versa,” Johnson said. “It’s a tremendous benefit.”
Jane Wright, an analyst at Technology Business Research, said Carbon Black’s exchange can act as a “water cooler” where security professionals talk about best practices and incident response. Even so, "sometimes the most valuable sharing just isn’t happening,” she said.
A major fear is that information shared about vulnerabilities or a company's infrastructure may be leaked accidentally to other hackers. But the pros can outweigh the cons. Companies Wright has talked to see the benefits of wider collaboration and even expect it from their vendor. They realize they’re walking a fine line between the risk of sharing too much and potentially stopping the next cyber attack.
Sign up for CIO Asia eNewsletters.