Arlington, VA – October 20, 2015—LookingGlass Cyber Solutions™, the leader in threat intelligence and dynamic threat defense, today announced OpenTPX, a contribution to the open source community to enable threat intelligence providers and security operations to easily integrate full context across their security portfolio. OpenTPX focuses on the complete picture of security and threat intelligence providing mechanisms to convey network topology information, network ownership, network segmentation, threat metadata, threat intelligence and mitigation actions in one mechanism.
OpenTPX was created to build highly scalable machine-readable threat intelligence, analysis and network security products that exchange data at large volumes and at high speed. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema permits threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. OpenTPX makes it possible for systems to convey all aspects of the network security and threat data in its most basic elements with minimal interpretation. This avoids complex or unwieldy language mappings that often confuse or block efforts to develop interoperable network security and threat intelligence systems. A major benefit of this simplicity allows OpenTPX content to be ingested by today’s data processing frameworks and key-value data stores in a highly efficient manner.
A core OpenTPX component provides a comprehensive threat-scoring framework that allows security analysts, threat researchers, network security operations and incident responders to make relevant threat mitigation decisions straight forward, while efficiently automating those decisions.
“Enterprises require threat defenses that not only interoperate with each other but also provide more value than the individual solutions deliver on their own. The volume and complexity of threats today demands better solutions to address them.” says Allan Thomson, CTO of LookingGlass. “OpenTPX technology allows our customers to maximize their tools and operational data to dramatically improve threat visibility, network security and operational efficiencies.”
The new OpenTPX integration along with accompanying documentation that includes specifications, data schema, data examples and supporting tools is immediately available at www.opentpx.org. Visit the OpenTPX website to learn more. For organizations interested in adopting OpenTPX with existing threat intelligence exchange formats such as CSV, STIX and OpenIOC, or IT security providers interested in becoming a LookingGlass partner, email [email protected] or visit the LookingGlass website at www.lgscout.com.
OpenTPX is a contribution by LookingGlass Cyber Solutions to the open source community to enable machine-readable threat intelligence exchange with full context at Internet performance and scale. OpenTPX defines a comprehensive model of network security and threat associated with the global Internet enabling interconnected systems to share network security operations data, threat meta-data, network segmentation, threat intelligence, threat scoring and mitigation information. By taking advantage of data model inheritance and meta-data constructs, the OpenTPX schema allows threat dictionary and meta-data to be conveyed only once between communicating systems. This allows OpenTPX to transmit hundreds of millions of network security observations based on that meta-data in a highly optimized mechanism, without requiring retransmission of the meta-data. The OpenTPX specification, data schema, data examples and supporting tools are freely available from www.opentpx.org.
About LookingGlass Cyber Solutions
LookingGlass Cyber Solutions is the leader in threat intelligence and dynamic threat defense. Uniquely architected to discover, understand, manage and mitigate threats, LookingGlass solutions deliver the most extensive sources of threat data available out of the box. This data is gathered, ingested, aggregated, normalized, enriched and analyzed to create threat intelligence. It is then layered on top of continuous monitoring and assessment of global Internet intelligence risks and activity for the ultimate threat visibility and understanding. LookingGlass dynamic threat defense includes intelligence-driven network and DNS defenses. LookingGlass empowers customers to confidently enable effective security decisions and efficient security operations throughout the threat lifecycle. For more information, visit www.LGScout.com.