Cybersecurity definition
What is STIX/TAXII?
STIX/TAXII stands for Structured Threat Information eXpression / Trusted Automated eXchange of Indicator Information.
By Cyber Tool Stack Editorial TeamUpdated
Definition
A pair of open standards for describing threat intelligence in a structured, machine-readable format (STIX) and automatically transporting it between sharing partners (TAXII), letting organizations exchange indicators and context without manually reformatting feeds.
Where STIX/TAXII fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
IOCIndicator of CompromiseForensic evidence that a system has already been breached — a malicious file hash, a known-bad IP address, a suspicious registry key — used to detect or confirm past or ongoing compromise.MITRE ATT&CKAdversarial Tactics, Techniques, and Common KnowledgeA free, continuously updated knowledge base, maintained by the MITRE Corporation, that catalogs real-world attacker behavior as a matrix of tactics (the attacker's goal, like lateral movement) and techniques (how it's done), giving defenders a shared vocabulary for describing and detecting threats.