Posts By Giampaolo Darelli
In the previous blog post, we provided a high-level overview of what CTI data are and how Sogei’s CERT collects them from reliable CTI feeds via OpenCTI. In this article, we detail how Sogei’s CERT sends this information to Service Ledger (SL), according to STIX/TAXII standards, to share it securely with other CERTs and/or SMEs. […]
Formats and Protocols STIX (Structured Threat Information eXchange) and TAXII (Trusted Automated eXchange of Indicator Information) are the main standards in the Cyber Threat Intelligence field; we can say that STIX states the “what” of threat intelligence, while TAXII defines “how” that information is transmitted. Regarding STIX, the main purpose of the format is to […]
What is Cyber Threat Intelligence? CTI is a knowledge base that includes mechanisms, indicators, contexts, and threats (both existing and emerging) that can be used to create preventive strategies, intervention tactics, and/or implement monitoring systems. CTI can be considered any information that can be correlated with other additional information in a way that allows an […]