Standardizing Cyber Threat Intelligence Information with the Structured Threat Information Expression
The Structured Threat Information eXpression (STIX) in cyber security is an effort to define and develop a language to represent structured threat information.
The STIX language is meant to convey the full range of cyber threat information and strives to be fully expressive, flexible, extensible, automatable, and as human-readable as possible.
This white paper outlines a community-driven solution to the problem known as the Structured Threat Information eXpression, or STIX.
What are the core set of guiding principles that community consensus has deemed necessary for STIX to implement?
Which organizations have already chosen to begin leveraging STIX (or its constituent components) to convey cyber threat information?
How does STIX resolve the requirement for maturing effective cyber threat intelligence and cyber threat information sharing?