STIX (Structured Threat Information eXpression) and the World Financial Community

Cybersecurity is a field whose methods are becoming extremely difficult to implement as the number and types of digital devices connected to the internet continue to proliferate. While one may traditionally consider cybersecurity as a field centered around PC's and servers, the potential targets for attackers now also include smartphones, tablets, and numerous other devices open to exploitation. This has created a problem where standards and implementation schemes across the expanding range of technologies are not always compatible, and as a result solutions to cybersecurity problems typically require a lot of individual attention from IT workers. Efficiency is out of the question, and security is weakened as a result. STIX is designed to take the opposite approach, and "maximize structure and consistency to support machine-processable automation"

• Center for International Strategy, Technology, and Policy
• School of International Affairs