The Trusted Automated eXchange of Indicator Information (TAXII™)
November 2012Topics: Safeguard and Secure Cyberspace
Today, an ever-growing number of organizations actively share cyber threat data in order to get a more complete view of adversary activity and help prioritize the organization’s own cyber defenses. Current cyber threat information sharing, however, is either a time-consuming, manual process or a limited-scope automation effort. The Trusted Automated eXchange of Indicator Information (TAXII) effort aims to enable robust, secure, and high-volume exchanges of significantly more expressive sets of cyber threat information. This paper describes the TAXII effort, the motivation behind TAXII, its goals, components, and development approach.