Vulnerabilities / Threats

10/20/2015
01:10 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

LookingGlass Simplifies Threat Intel with Contribution to Open Source Community

OpenTPX provides machine-readable threat intelligence, combining network security operations data with threat intelligence, analysis and scoring data in an optimized manner

Arlington, VA – October 20, 2015—LookingGlass Cyber Solutions™, the leader in threat intelligence and dynamic threat defense, today announced OpenTPX, a contribution to the open source community to enable threat intelligence providers and security operations to easily integrate full context across their security portfolio. OpenTPX focuses on the complete picture of security and threat intelligence providing mechanisms to convey network topology information, network ownership, network segmentation, threat metadata, threat intelligence and mitigation actions in one mechanism.

OpenTPX was created to build highly scalable machine-readable threat intelligence, analysis and network security products that exchange data at large volumes and at high speed. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema permits threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. OpenTPX makes it possible for systems to convey all aspects of the network security and threat data in its most basic elements with minimal interpretation. This avoids complex or unwieldy language mappings that often confuse or block efforts to develop interoperable network security and threat intelligence systems. A major benefit of this simplicity allows OpenTPX content to be ingested by today’s data processing frameworks and key-value data stores in a highly efficient manner.

A core OpenTPX component provides a comprehensive threat-scoring framework that allows security analysts, threat researchers, network security operations and incident responders to make relevant threat mitigation decisions straight forward, while efficiently automating those decisions.

“Enterprises require threat defenses that not only interoperate with each other but also provide more value than the individual solutions deliver on their own. The volume and complexity of threats today demands better solutions to address them.” says Allan Thomson, CTO of LookingGlass. “OpenTPX technology allows our customers to maximize their tools and operational data to dramatically improve threat visibility, network security and operational efficiencies.”

The new OpenTPX integration along with accompanying documentation that includes specifications, data schema, data examples and supporting tools is immediately available at www.opentpx.org. Visit the OpenTPX website to learn more. For  organizations interested in adopting OpenTPX with existing threat intelligence exchange formats such as CSV, STIX and OpenIOC, or IT security providers interested in becoming a LookingGlass partner, email [email protected] or visit the LookingGlass website at www.lgscout.com.

About OpenTPX

OpenTPX is a contribution by LookingGlass Cyber Solutions to the open source community to enable machine-readable threat intelligence exchange with full context at Internet performance and scale. OpenTPX defines a comprehensive model of network security and threat associated with the global Internet enabling interconnected systems to share network security operations data, threat meta-data, network segmentation, threat intelligence, threat scoring and mitigation information. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema allows threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. The OpenTPX specification, data schema, data examples and supporting tools are freely available from www.opentpx.org.

About LookingGlass Cyber Solutions

LookingGlass Cyber Solutions is the leader in threat intelligence and dynamic threat defense. Uniquely architected to discover, understand, manage and mitigate threats, LookingGlass solutions deliver the most extensive sources of threat data available out of the box. This data is gathered, ingested, aggregated, normalized, enriched and analyzed to create threat intelligence. It is then layered on top of continuous monitoring and assessment of global Internet intelligence risks and activity for the ultimate threat visibility and understanding. LookingGlass dynamic threat defense includes intelligence-driven network and DNS defenses. LookingGlass empowers customers to confidently enable effective security decisions and efficient security operations throughout the threat lifecycle. For more information, visit www.LGScout.com

 

Caroline Dobyns

Account Coordinator

410-353-5340

[email protected]

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication
John Fontana, Standards & Identity Analyst, Yubico,  9/19/2018
Turn the NIST Cybersecurity Framework into Reality: 5 Steps
Mukul Kumar & Anupam Sahai, CISO & VP of Cyber Practice and VP Product Management, Cavirin Systems,  9/20/2018
NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "I'm not sure I like this top down management approach!"
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17338
PUBLISHED: 2018-09-23
An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.
CVE-2018-17341
PUBLISHED: 2018-09-23
BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.
CVE-2018-17332
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
CVE-2018-17333
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svg_types.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because sscanf is misused.
CVE-2018-17334
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.