1. SHARING CYBER THREAT INTELLIGENCE JUST GOT A LOT EASIER
SHARING CYBER THREAT INTELLIGENCE JUST GOT A LOT EASIER

2. STIX 2.0 – Where we are
TC has voted to approve a Committee Specification Draft & will open a public review
Community is already developing documentation, tooling, and is working on 2.1

3. STIX 2.0
…is JSON, not XML
…has improved patterning
…is smaller and more focused
…has a complete specification
…is explicitly nodes and edges
…is true to its roots

6. Before and After: JSON
Before
After

7. Before and After: Patterning

8. STIX is true to its roots
Before
After

9. STIX 2.1: Where we’re going
STIX 2.1: Where we’re going
Filling in the blanks
Malware, Course of Action
Expanding to new use cases
Incident, Infrastructure
Focusing on the community
Confidence, Opinion, Intel Notes

10. …uses native HTTP features …is HTTPS by default
TAXII 2.0
…uses native HTTP features
…is HTTPS by default
…has channels & collections
…is built to support trust groups