STIX and TAXII: The Who, When, What, Where, Why and HowReturn to TOC

No ratings

Presented at FIRST 2014 by

Richard Struse

In January 2012, the US Department of Homeland Security began to pursue an unprecedented effort to standardize and automate cybersecurity information sharing in an open and community-focused way that aimed not only to advance the state of practice for critical national infrastructure, but public and private sector networks everywhere. Now, in 2014, STIX and TAXII are being actively adopted by government agencies, major software vendors and critical infrastructure organizations. This presentation will explain the origin and objectives of these efforts, describe some of the critical choices that were made, and make clear the incredible importance of open and responsive community engagement every step of the way.