Leveraging STIX for Actionable Intelligence and Automated Response

Abstract

STIX and associated standards can be leveraged and integrated in useful ways to improve security posture, event visibility, response to attacks and anomalous conditions in addition to allowing for machine readable exchange of threat intelligence information. This paper outlines some of the ways the project has or will leverage STIX and CACAO to achieve these goals.