Eureka! Institutional Repository

In the following pages both STIX and TAXII are analyzed on what is their usage and how they accomplish their targets. Both of the technologies are explained in depth. Prior to that there is a small introduction on why they technologies where developed in the first place and what was the situation prior to them. After the theoretical part the focus shifts to the implementation. The implementation is divided in two sections, the stix RESTful web service and the taxii server-client. All of the above make use of the java programming language The stix ws runs on a tomcat server and accepts http requests to which it responds accordingly. In most cases that content is requested it returns a zip file that contains all the stix files in an xml format (stix 1.x version). It utilizes the rss technology to pull content from different sources and then constructs the stix file according to the specification. The taxii part of the implementation consists of the taxii server and the taxii client. The taxii server runs on the same server as the stix ws does but in an isolated virtual environment. It saves all the incoming taxii messages that include stix content. In order to communicate with the taxii server a client is required. The taxii client a cli tool that either pushed info to the server or pulls data from it. It can also be used to get information about the available data on the server (i.e available (data collections). The last part consists of the conclusions that came out of the research and the implementation phase.