Cybersecurity Information Exchange Techniques: Cybersecurity Information Ontology and CYBEX

摘要

Cyber threats cross country borders, but most organizations are currently coping with them individually without global collaboration mainly due to the lack of global standards for cybersecurity information exchange framework and format. Though there exist multiple local or community standards to solve this problem, they are not orchestrated in order for each organization to fully collaborate each other. To build the basis of cybersecurity information exchange framework, this paper proposes a cybersecurity operational information ontology. It also discusses the standardization activities on cybersecurity information exchange, such as CYBEX and its ensembles, and its effectiveness from the standpoint of expediting cybersecurity information exchange and streamlining cybersecurity operations.