Who Do You Think You Are?
summary
Maps how vulnerability and incident-data standards and sharing bodies actually evolved: CVE feeds identifiers into IODEF XML schema (IODEF published ~2007) while Mandiant’s OpenIOC goes open in 2011 and STIX/TAXII emerge (TAXII as transport) with CybOX folded into STIX; implementations exist but uptake is uneven — federal agencies initially avoid IODEF because “incident” implies liability. CERT/FIRST starts in 1988, FS‑ISAC in 1999 and there are about 26 ISACs on the national council; mandatory reporting (NIS, CISA, NY rules) is increasing and reshapes voluntary sharing.
AI-written summary · about
chapters (4)
related talks
52mData-Driven Cyber Policy: From Dream to Reality
37mGoverning Global Vulnerabilities: Standards for Open Source Resilience
27mIndicator Message eXchange (IMX): Enabling Structured Cyber Threat Intelligence Sharing
01h 05mCritical Information Infrastructure (CII) Protection: Challenges & Opportunities
01h 29mFrameworks and Related Standards
26mIC5 – Integrated CERT Cyber Communications, Collaboration & Coordination Framework
40mHow CISA Is Charting a Path Toward Defensible Infrastructure
45mSimplifying Coordinating Vulnerabilities & Disclosures in Open Source...