+1 coinfor reading to the end
+1
Home / Glossary / STIX
Glossary · Protocol

STIX

Structured Threat Information eXchange

In plain language

A shared format for describing cyber threats so security tools can pass the details to each other.

The metaphor

Like a standard police report form that every station fills in the same way.

Going deeper

How it works

  • It describes attackers, malware and warning signs.
  • Tools read it automatically.
  • It is paired with TAXII for delivery.
  • Used by security teams and tool makers.
In practice
  • A security tool imports a list of bad websites.
  • A team shares findings with partners.
  • A report is exchanged between systems.

A question owners ask

Do I need to use it?

No. It works in the background of security tools.

Related terms
AHAuthentication HeaderARPAddress Resolution ProtocolBGPBorder Gateway ProtocolCCMPCounter Mode/CBC-MAC ProtocolCHAPChallenge Handshake Authentication ProtocolCRCCyclical Redundancy CheckEAPExtensible Authentication ProtocolESPEncapsulated Security Payload

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →