The cybersecurity information exchange framework, known as CYBEX, is currently undergoing its first iteration of standardization efforts within ITU-T. The framework describes how cybersecurity information is exchanged between cybersecurity entities on a global scale and how the exchange is assured. The worldwide implementation of the framework will eventually minimize the disparate availability of cybersecurity information. This paper provides a specification overview, use cases, and the current status of CYBEX. Categories and Subject Descriptors C.2.0 [Computer-Communication Networks]: General-Security and Protection; K.6.5 [Management of Computing and Information Systems]: Security and Protection General Terms Standardization, Security, Design Keywords CYBEX, cybersecurity, security, information exchange
Anthony M. Rutkowski, Youki Kadobayashi, Inette Fu