Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

10/20/2015
01:10 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

LookingGlass Simplifies Threat Intel with Contribution to Open Source Community

OpenTPX provides machine-readable threat intelligence, combining network security operations data with threat intelligence, analysis and scoring data in an optimized manner

Arlington, VA – October 20, 2015—LookingGlass Cyber Solutions™, the leader in threat intelligence and dynamic threat defense, today announced OpenTPX, a contribution to the open source community to enable threat intelligence providers and security operations to easily integrate full context across their security portfolio. OpenTPX focuses on the complete picture of security and threat intelligence providing mechanisms to convey network topology information, network ownership, network segmentation, threat metadata, threat intelligence and mitigation actions in one mechanism.

OpenTPX was created to build highly scalable machine-readable threat intelligence, analysis and network security products that exchange data at large volumes and at high speed. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema permits threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. OpenTPX makes it possible for systems to convey all aspects of the network security and threat data in its most basic elements with minimal interpretation. This avoids complex or unwieldy language mappings that often confuse or block efforts to develop interoperable network security and threat intelligence systems. A major benefit of this simplicity allows OpenTPX content to be ingested by today’s data processing frameworks and key-value data stores in a highly efficient manner.

A core OpenTPX component provides a comprehensive threat-scoring framework that allows security analysts, threat researchers, network security operations and incident responders to make relevant threat mitigation decisions straight forward, while efficiently automating those decisions.

“Enterprises require threat defenses that not only interoperate with each other but also provide more value than the individual solutions deliver on their own. The volume and complexity of threats today demands better solutions to address them.” says Allan Thomson, CTO of LookingGlass. “OpenTPX technology allows our customers to maximize their tools and operational data to dramatically improve threat visibility, network security and operational efficiencies.”

The new OpenTPX integration along with accompanying documentation that includes specifications, data schema, data examples and supporting tools is immediately available at www.opentpx.org. Visit the OpenTPX website to learn more. For  organizations interested in adopting OpenTPX with existing threat intelligence exchange formats such as CSV, STIX and OpenIOC, or IT security providers interested in becoming a LookingGlass partner, email [email protected] or visit the LookingGlass website at www.lgscout.com.

About OpenTPX

OpenTPX is a contribution by LookingGlass Cyber Solutions to the open source community to enable machine-readable threat intelligence exchange with full context at Internet performance and scale. OpenTPX defines a comprehensive model of network security and threat associated with the global Internet enabling interconnected systems to share network security operations data, threat meta-data, network segmentation, threat intelligence, threat scoring and mitigation information. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema allows threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. The OpenTPX specification, data schema, data examples and supporting tools are freely available from www.opentpx.org.

About LookingGlass Cyber Solutions

LookingGlass Cyber Solutions is the leader in threat intelligence and dynamic threat defense. Uniquely architected to discover, understand, manage and mitigate threats, LookingGlass solutions deliver the most extensive sources of threat data available out of the box. This data is gathered, ingested, aggregated, normalized, enriched and analyzed to create threat intelligence. It is then layered on top of continuous monitoring and assessment of global Internet intelligence risks and activity for the ultimate threat visibility and understanding. LookingGlass dynamic threat defense includes intelligence-driven network and DNS defenses. LookingGlass empowers customers to confidently enable effective security decisions and efficient security operations throughout the threat lifecycle. For more information, visit www.LGScout.com

 

Caroline Dobyns

Account Coordinator

410-353-5340

[email protected]

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Ransomware Damage Hit $11.5B in 2019
Dark Reading Staff 2/20/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-7914
PUBLISHED: 2020-02-21
btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapping of a crafted NFC tag.
CVE-2016-4606
PUBLISHED: 2020-02-21
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
CVE-2020-5243
PUBLISHED: 2020-02-21
uap-core before 0.7.3 is vulnerable to a denial of service attack when processing crafted User-Agent strings. Some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent hea...
CVE-2019-14688
PUBLISHED: 2020-02-20
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial produc...
CVE-2019-19694
PUBLISHED: 2020-02-20
The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain time during the system startup process to disable the product's malware protection functions or the ...