Vulnerabilities / Threats

10/20/2015
01:10 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

LookingGlass Simplifies Threat Intel with Contribution to Open Source Community

OpenTPX provides machine-readable threat intelligence, combining network security operations data with threat intelligence, analysis and scoring data in an optimized manner

Arlington, VA – October 20, 2015—LookingGlass Cyber Solutions™, the leader in threat intelligence and dynamic threat defense, today announced OpenTPX, a contribution to the open source community to enable threat intelligence providers and security operations to easily integrate full context across their security portfolio. OpenTPX focuses on the complete picture of security and threat intelligence providing mechanisms to convey network topology information, network ownership, network segmentation, threat metadata, threat intelligence and mitigation actions in one mechanism.

OpenTPX was created to build highly scalable machine-readable threat intelligence, analysis and network security products that exchange data at large volumes and at high speed. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema permits threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. OpenTPX makes it possible for systems to convey all aspects of the network security and threat data in its most basic elements with minimal interpretation. This avoids complex or unwieldy language mappings that often confuse or block efforts to develop interoperable network security and threat intelligence systems. A major benefit of this simplicity allows OpenTPX content to be ingested by today’s data processing frameworks and key-value data stores in a highly efficient manner.

A core OpenTPX component provides a comprehensive threat-scoring framework that allows security analysts, threat researchers, network security operations and incident responders to make relevant threat mitigation decisions straight forward, while efficiently automating those decisions.

“Enterprises require threat defenses that not only interoperate with each other but also provide more value than the individual solutions deliver on their own. The volume and complexity of threats today demands better solutions to address them.” says Allan Thomson, CTO of LookingGlass. “OpenTPX technology allows our customers to maximize their tools and operational data to dramatically improve threat visibility, network security and operational efficiencies.”

The new OpenTPX integration along with accompanying documentation that includes specifications, data schema, data examples and supporting tools is immediately available at www.opentpx.org. Visit the OpenTPX website to learn more. For  organizations interested in adopting OpenTPX with existing threat intelligence exchange formats such as CSV, STIX and OpenIOC, or IT security providers interested in becoming a LookingGlass partner, email [email protected] or visit the LookingGlass website at www.lgscout.com.

About OpenTPX

OpenTPX is a contribution by LookingGlass Cyber Solutions to the open source community to enable machine-readable threat intelligence exchange with full context at Internet performance and scale. OpenTPX defines a comprehensive model of network security and threat associated with the global Internet enabling interconnected systems to share network security operations data, threat meta-data, network segmentation, threat intelligence, threat scoring and mitigation information. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema allows threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. The OpenTPX specification, data schema, data examples and supporting tools are freely available from www.opentpx.org.

About LookingGlass Cyber Solutions

LookingGlass Cyber Solutions is the leader in threat intelligence and dynamic threat defense. Uniquely architected to discover, understand, manage and mitigate threats, LookingGlass solutions deliver the most extensive sources of threat data available out of the box. This data is gathered, ingested, aggregated, normalized, enriched and analyzed to create threat intelligence. It is then layered on top of continuous monitoring and assessment of global Internet intelligence risks and activity for the ultimate threat visibility and understanding. LookingGlass dynamic threat defense includes intelligence-driven network and DNS defenses. LookingGlass empowers customers to confidently enable effective security decisions and efficient security operations throughout the threat lifecycle. For more information, visit www.LGScout.com

 

Caroline Dobyns

Account Coordinator

410-353-5340

[email protected]

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Meet 'Bro': The Best-Kept Secret of Network Security
Greg Bell, CEO, Corelight,  6/14/2018
Containerized Apps: An 8-Point Security Checklist
Jai Vijayan, Freelance writer,  6/14/2018
Four Faces of Fraud: Identity, 'Fake' Identity, Ransomware & Digital
David Shefter, Chief Technology Officer at Ziften Technologies,  6/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-0291
PUBLISHED: 2018-06-20
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol ...
CVE-2018-0292
PUBLISHED: 2018-06-20
A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in ...
CVE-2018-0293
PUBLISHED: 2018-06-20
A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is du...
CVE-2018-0294
PUBLISHED: 2018-06-20
A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive...
CVE-2018-0295
PUBLISHED: 2018-06-20
A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update...