TAXII
E590628
TAXII (Trusted Automated eXchange of Indicator Information) is a cybersecurity protocol that enables the automated, secure sharing of threat intelligence between organizations and systems.
All labels observed (3)
| Label | Occurrences |
|---|---|
| TAXII canonical | 3 |
| OpenVAS Transfer Protocol | 1 |
| TAXII 1.1 | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T6408757 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: TAXII Context triple: [OASIS, standardDeveloped, TAXII]
-
A.
Tenable
Tenable is a British daytime television quiz show, hosted by Warwick Davis, in which teams of contestants attempt to complete top-ten lists on a variety of topics.
-
B.
PrivX
PrivX is a privileged access management and zero-trust remote access solution developed by SSH Communications Security for secure, audited access to critical IT infrastructure.
-
C.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
D.
Cyber Gateway
Cyber Gateway is a prominent IT office complex and architectural landmark in Hyderabad’s HITEC City, housing numerous technology and business firms.
-
E.
Maltego
Maltego is a graphical link analysis and data mining tool widely used in digital forensics and open-source intelligence (OSINT) investigations.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: TAXII Target entity description: TAXII (Trusted Automated eXchange of Indicator Information) is a cybersecurity protocol that enables the automated, secure sharing of threat intelligence between organizations and systems.
-
A.
Tenable
Tenable is a British daytime television quiz show, hosted by Warwick Davis, in which teams of contestants attempt to complete top-ten lists on a variety of topics.
-
B.
PrivX
PrivX is a privileged access management and zero-trust remote access solution developed by SSH Communications Security for secure, audited access to critical IT infrastructure.
-
C.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
D.
Cyber Gateway
Cyber Gateway is a prominent IT office complex and architectural landmark in Hyderabad’s HITEC City, housing numerous technology and business firms.
-
E.
Maltego
Maltego is a graphical link analysis and data mining tool widely used in digital forensics and open-source intelligence (OSINT) investigations.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
cybersecurity protocol
ⓘ
network protocol ⓘ |
| abbreviation | TAXII ⓘ |
| architecture | client-server ⓘ |
| benefit |
enables standardized data exchange
ⓘ
improves timeliness of threat intelligence distribution ⓘ reduces manual effort in sharing indicators ⓘ |
| category | threat intelligence sharing protocol ⓘ |
| currentMajorVersion | 2 ⓘ |
| designedFor |
information sharing communities
ⓘ
organizations ⓘ security products ⓘ |
| domain |
cybersecurity
ⓘ
threat intelligence ⓘ |
| enables | interoperable exchange of threat intelligence ⓘ |
| focus | structured cyber threat information ⓘ |
| fullName | Trusted Automated eXchange of Indicator Information ⓘ |
| governedBy | OASIS ⓘ |
| interoperatesWith |
SIEM systems
ⓘ
security orchestration tools ⓘ threat intelligence platforms ⓘ |
| purpose |
automated sharing of cyber threat intelligence
ⓘ
secure exchange of threat indicators ⓘ |
| relatedStandard | STIX ⓘ |
| role |
client
ⓘ
server ⓘ |
| scope | machine-readable threat intelligence exchange ⓘ |
| securityFeature |
TLS encryption
ⓘ
access control ⓘ authentication ⓘ |
| standardBody | OASIS Open ⓘ |
| supports |
RESTful APIs
ⓘ
collections of threat intelligence objects ⓘ machine-to-machine threat intelligence sharing ⓘ pull-based data retrieval ⓘ push-based data delivery ⓘ |
| transportProtocol |
HTTP
ⓘ
HTTPS ⓘ |
| typicallyTransports | STIX data ⓘ |
| useCase |
sharing attack patterns
ⓘ
sharing indicators of compromise ⓘ sharing malware information ⓘ sharing security alerts ⓘ sharing threat actor information ⓘ |
| version |
TAXII 1.0
ⓘ
TAXII 1.1 ⓘ
linked to:
TAXII
TAXII 2.0 ⓘ TAXII 2.1 ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: TAXII Description of subject: TAXII (Trusted Automated eXchange of Indicator Information) is a cybersecurity protocol that enables the automated, secure sharing of threat intelligence between organizations and systems.
Referenced by (5)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: TAXII