利用STIX实现可操作的智能和自动响应

2021 Resilience Week (RWS) Pub Date : 2021-10-18 DOI:10.1109/RWS52686.2021.9611811

Christian O. Hunt

{"title":"利用STIX实现可操作的智能和自动响应","authors":"Christian O. Hunt","doi":"10.1109/RWS52686.2021.9611811","DOIUrl":null,"url":null,"abstract":"STIX and associated standards can be leveraged and integrated in useful ways to improve security posture, event visibility, response to attacks and anomalous conditions in addition to allowing for machine readable exchange of threat intelligence information. This paper outlines some of the ways the project has or will leverage STIX and CACAO to achieve these goals.","PeriodicalId":294639,"journal":{"name":"2021 Resilience Week (RWS)","volume":"28 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-10-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Leveraging STIX for Actionable Intelligence and Automated Response\",\"authors\":\"Christian O. Hunt\",\"doi\":\"10.1109/RWS52686.2021.9611811\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"STIX and associated standards can be leveraged and integrated in useful ways to improve security posture, event visibility, response to attacks and anomalous conditions in addition to allowing for machine readable exchange of threat intelligence information. This paper outlines some of the ways the project has or will leverage STIX and CACAO to achieve these goals.\",\"PeriodicalId\":294639,\"journal\":{\"name\":\"2021 Resilience Week (RWS)\",\"volume\":\"28 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-10-18\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2021 Resilience Week (RWS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/RWS52686.2021.9611811\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 Resilience Week (RWS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/RWS52686.2021.9611811","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 0

摘要

除了允许机器可读的威胁情报信息交换之外，还可以以有用的方式利用和集成STIX和相关标准，以改进安全状态、事件可见性、对攻击和异常情况的响应。本文概述了项目已经或将要利用STIX和CACAO实现这些目标的一些方法。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Leveraging STIX for Actionable Intelligence and Automated Response

STIX and associated standards can be leveraged and integrated in useful ways to improve security posture, event visibility, response to attacks and anomalous conditions in addition to allowing for machine readable exchange of threat intelligence information. This paper outlines some of the ways the project has or will leverage STIX and CACAO to achieve these goals.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2021 Resilience Week (RWS)

自引率

0.00%

发文量