though-provoking impulse MISP as part of STIX "ecosystem" -

["JE" <je@cybersecurityscout.eu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear all,

As first impulse I'ld like to sprinkle in some thoughts and experiences from
the German/European bluechip companies CERT/CSIRT/CISO community operating
worldwide partly incl. subsidiary cyber centers in Americas and Asia: Many
center make heavy use of open source software, looking at Threat Intell
there is a clear trend to use MISP (see http://www.misp-project.org/,
initially pushed and still used by SIEMENS CERT as well as others like
Airbus, Infineon etc.) in those environments instead of "plain" STIX driven
by desire of ease of use and instant usability. Some of your participating
in FIRST maybe got the parallel discussion going on there. 

This hence leads to opinions like "to make STIX 2 a success incorporating
MISP would be beneficial". 

What are your experiences and thoughts?

Best Regards,
Joerg




-----BEGIN PGP SIGNATURE-----
Version: Encryption Desktop 10.3.2 (Build 21495)
Comment: PGPenc
Charset: us-ascii

wlcDBQFZbUYAjvsaQ49QRjsRCNKMAQC+luTcGl2+CvR/sizukyWAD5y0qDwIhdSm
PD5H+B1bnwD/WUSESSqcEubntLghn9vAQqSI6g65+qYk2gcWeakbNxU=
=aFy7
-----END PGP SIGNATURE-----