|
|
|
|
|
STIX™ is a collaborative community-driven effort to define and develop a standardized language to represent structured cyber threat information. The STIX Language intends to convey the full range of potential cyber threat information and strives to be fully expressive, flexible, extensible, automatable, and as human-readable as possible. All interested parties are welcome to participate in evolving STIX as part of its open, collaborative community.
Trusted Automated eXchange of Indicator Information (TAXII™) is the main transport mechanism for cyber threat information represented as STIX. Through the use of TAXII services, organizations can share cyber threat information in a secure and automated manner.
|
more…
more…
Status Report
STIX Version 1.0 was released on April 8, 2013, and includes updated versions of the following: moved references to external schemas from core and components to a set of extensions; more loosely coupled STIX components with each other and with core; moved many usages of enums and strings to controlled vocabularies with STIX-provided defaults as well as extension mechanisms; and added more depth to the Threat Actor, TTP, and Incident components thanks to contributions from iSight Partners, Inc. View the complete release notes.
|
|
