The system demonstrates the utility of sharing cyber threat information internationally — using industry standards and open source tools — as a means of improving an organization’s overall cyber defense.
CTI sharing is becoming increasingly critical to improving the effective cyber defense capabilities of organizations. Recent large-scale information thefts have prompted new legislation and policy calling for government and commercial entities to share intelligence of potential cyber threats to improve overall defense. The cyber threat intelligence sharing system developed as part of this partnership enhances the company’s ability to provide universal protection across both physical and virtual worlds, for both commercial and government customers.
“This partnership builds upon our strong working relationship with Fujitsu,” said Peder Jungck, chief technology officer of BAE Systems’ Intelligence & Security sector. “As a team, we’re producing some of the most cutting-edge solutions to manage our customers’ defense and security needs, regardless of the industry.”
For this collaboration, BAE Systems leveraged its deep expertise in CTI analysis and model-based software engineering to create a threat sharing technology based on the internationally approved Structured Threat Information eXpression (STIX) and Trust Automated Exchange of Indicator Information (TAXII) standards.
The system allows for a secure, two-way exchange of CTI between BAE Systems and Fujitsu. It also provides an innovative, model-based data protection framework that enforces sharing policies to prevent private corporate data from being exchanged. BAE Systems and Fujitsu cyber analysts can now easily review shared cyber threat intelligence, modify their security settings to their respective networks, and adjust what types of cyber threat intelligence they wish to share with their partners, creating an agile CTI management framework.
The work will be completed at multiple locations in Tokyo and across Northern Virginia.
Retired U.S. Air Force Major General Jim Keffer, former chief of staff of CYBERCOM and president of Keffer Consulting, LLC, has joined the program as a BAE Systems subject matter expert. He brings unique and unmatched experience to the design and validation of CTI sharing.
BAE Systems provides intelligence and security services to manage big data, inform big decisions, and support big missions. BAE Systems delivers a broad range of solutions and services including intelligence analysis, cyber operations, IT, systems development, systems integration, and operations and maintenance to enable militaries and governments to recognize, manage, and defeat threats. The company takes pride in supporting critical national security missions that protect the nation and those who serve.