Getting started with Service Ledger
9th May, 2023
Author Gilberto Zanfino
Service Ledger (SL) is a blockchain-based platform that delivers secure storage and sharing of CTI (Cyber Threat Intelligence) data in STIX and TAXII standards. For a more detailed explanation of what SL is, how it works and how it ensures the security of CTI data, check out our previous blog post. Within the CyberKit4SME project, SMEs and MEs can leverage SL to share their collected CTI information and enhance their cyber situational awareness, thereby becoming more resilient to possible attacks.
With Service Ledger, you have the flexibility to use it via web app or via API calls.
The web app makes it easy to register an organisation and its members in SL. Once a member authenticates in the web app, she/he can easily store CTI data by uploading a STIX object (in json format) or by copying-and-pasting its content on the dedicated web page. A member can inspect all the organisation’s STIX objects and, if authorised, those belonging to other organisations. Additionally, the web app offers a user-friendly way to filter the STIX objects with a drop-down list of parameters to be selected.
The HTTPS APIs allow direct interaction with the SL servers, according to the traditional request/response model. Specifically, an organisation can integrate APIs into its existing infrastructure (e.g., a local client), automating the CTI data processing and improving efficiency. With SL’s API calls, you have full control over how you share your STIX objects and inspect those stored in the SL repository, and can easily merge them into your workflows.
In summary, SL offers secure and flexible CTI data sharing via its web app and APIs. The web app provides ease of use, without the need for local installation or maintenance, while API calls provide full control and integration into your existing infrastructure.