#Alienvault open threat exchange update
#Alienvault open threat exchange code

The Facebook ThreatExchange is in beta and requires an application or invitation to join. Competitors īoth Facebook and IBM have threat exchange platforms. A similar deal with Hewlett Packard was announced the same year. In 2015, AlienVault partnered with Intel to coordinate real-time threat information on OTX. OTX is a big data platform that integrates natural language processing and machine learning to facilitate the collection and correlation of data from many sources, including third-party threat feeds, websites, external API and local agents. Threat data from groups can also be distributed to subscribers of managed service providers using OTX.' Technology The feature is intended to facilitate more in-depth discussions on specific threats, particular industries, and different regions of the world. In 2016, AlienVault released a new version of OTX allowing participants to create private communities and discussions groups to share information on threats only within the group. Specific OTX components include a dashboard with details about the top malicious IPs around the world and to check the status of specific IPs notifications should an organization's IP or domain be found in a hacker forum, blacklist or be listed by in OTX and a feature to review log files to determine if there has been communication with known malicious IPs. Relevant information is extracted automatically, assisting IT professionals to more readily analyze data. The platform can read security report in. OTX combines social contributions with automated machine-to-machine tools that integrates with major security products such as firewalls and perimeter security hardware. Users can up-vote and comment on specific pulses to assist others in identifying the most important threats.

#Alienvault open threat exchange update

Pulses can be exported as STIX, JSON, OpenloC, MAEC and CSV, and can be used to automatically update local security products. Users can subscribe to a “Pulse,” an analysis of a specific threat, including data on IoC, impact, and the targeted software. Users can share the IP addresses or websites from where attacks originated or look up specific threats to see if anyone has already left such information. In 2015, OTX 2.0 added a social network which enables members to share, discuss and research security threats, including via a real-time threat feed. The data is validated by the OTX platform then stripped of information identifying the participating contributor. Its automated tools cleanse, aggregate, validate and publish data shared by participants. Information sharing covers a wide range of issues related to security, including viruses, malware, intrusion detection and firewalls. The collaborative threat exchange was created partly as a counterweight to criminal hackers successfully working together and sharing information about viruses, malware and other cyber attacks. įounded in 2012, OTX was created and is run by AlienVault (now AT&T Cybersecurity), a developer of commercial and open source solutions to manage cyber attacks.

It has more than 180,000 participants in 140 countries who share more than 19 million potential threats daily. Open Threat Exchange (OTX) is a crowd-sourced computer-security platform. I do not let companies pay me to write blog entries.Crowd-sourced computer-security platform Open Threat Exchange Developer(s)Ĭ/open-threat-exchange I’m hoping I’m managing my own bias on open source but like I’ve already said, try to use your own judgment on things I write.

#Alienvault open threat exchange code

I believe strongly in protection of intellectual property and I know proprietary code and its protection is also critically important in moving us all forward, but so frequently the open source community is under represented so I want to try hard to make sure they are given a fair shake. I also have a general bias towards open source software. I was an enterprise CTO and now I study them. Another bias is to look at things from a lens of enterprise technology. I hope everything I do is supportive of national security. One key bias comes from years in the US national security community. I’m hoping the things here are of interest and use but please use your own judgment.

Since this is a personal blog my most important point regarding bias is that you should evaluate everything written here yourself. Disclaimers and Bias This blog is primarily written by Bob Gourley with a few other guest writers as invited.