#specificationrelease

The OASIS Cyber Threat Intelligence (CTI) technical committee (TC) has released the Committee Specification Draft (CSD) of the upcoming version of Cyber Observable eXpression (CybOX™) for public review and comment. The review period ends on October 28, 2016.

“This is an open invitation to comment. OASIS solicits feedback from potential users, developers and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.”

CybOX Version 2.1.1 Committee Specification Draft 01 / Public Review Draft 01 20 June 2016

“Cyber Observable Expression (CybOX) is a standardized language for encoding and communicating high-fidelity information about cyber observables, whether dynamic events or stateful measures that are observable in the operational cyber domain. By specifying a common structured schematic mechanism for these cyber observables, the intent is to enable the potential for detailed automatable sharing, mapping, detection and analysis heuristics.”

Last chance to provide comments to the OASIS Cyber Threat Intelligence (CTI) Technical Committee (TC) on the draft specifications for the upcoming versions of Structured Threat Information Expression (STIX™) and Trusted Automated eXchange of Indicator Information (TAXII™).

All comments on the draft specifications are due by February 17, 2016.

"STIX Version 1.2.1 - Committee Specification Draft 01" - “Structured Threat Information Expression (STIX) is a collaborative, community-driven effort to define and develop a framework for expressing cyber threat information to enable cyber threat information sharing and cyber threat analysis. The STIX framework comprises a collection of extensible component specifications along with an overarching core specification and supporting specifications. STIX Version 1.2.1 provides an overview of those specifications and defines how they are used within the broader STIX framework.”

"TAXII Version 1.1.1 - Committee Specification Draft 01" - “Trusted Automated eXchange of Indicator Information (TAXII) defines a set of services and message exchanges that, when implemented, enable sharing of actionable cyber threat information across organization and product/service boundaries. TAXII Version 1.1.1 defines concepts, protocols and messages to exchange cyber threat information for the detection, prevention, and mitigation of cyber threats.”

The OASIS Cyber Threat Intelligence (CTI) technical committee (TC) has released Committee Specification Drafts (CSDs) of upcoming versions of Structured Threat Information Expression (STIX™) and Trusted Automated eXchange of Indicator Information (TAXII™) for public review and comment. The review period ends on February 17, 2016.

“This is an open invitation to comment. OASIS solicits feedback from potential users, developers and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.”

STIX Version 1.2.1 Committee Specification Draft 01 / Public Review Draft 01 06 November 2015

“Structured Threat Information Expression (STIX) is a collaborative, community-driven effort to define and develop a framework for expressing cyber threat information to enable cyber threat information sharing and cyber threat analysis. The STIX framework comprises a collection of extensible component specifications along with an overarching core specification and supporting specifications. STIX Version 1.2.1 provides an overview of those specifications and defines how they are used within the broader STIX framework.”

TAXII Version 1.1.1 Committee Specification Draft 01 / Public Review Draft 01 06 November 2015

“Trusted Automated eXchange of Indicator Information (TAXII) defines a set of services and message exchanges that, when implemented, enable sharing of actionable cyber threat information across organization and product/service boundaries. TAXII Version 1.1.1 defines concepts, protocols and messages to exchange cyber threat information for the detection, prevention, and mitigation of cyber threats. TAXII is not an information sharing initiative or application and does not attempt to define trust agreements, governance, or non-technical aspects of cyber threat information sharing. Instead, TAXII empowers organizations to achieve improved situational awareness about emerging threats, and enables organizations to easily share the information they choose with the partners they choose.”