DTCC and FS-ISAC launch cybercrime intelligence sharing platform

Source: Soltra

Soltra™, an FS-ISAC and DTCC joint venture created to help secure critical infrastructure entities from cyber threats, today announced the first industry-driven threat intelligence sharing solution, Soltra Edge™.

Soltra Edge is a software solution designed to collect massive amounts of cyber threat intelligence from a variety of sources, convert it into standardized language and enable users to take immediate action.

Soltra Edge collects, standardizes and routes the flow of cyber threat intelligence between people, communities and devices. The basic version of Soltra Edge, which contains the features most needed by many organizations, will be available at no cost. Additional versions that support the requirements of larger entities will also be released. Soltra Edge leverages open standards, including Structured Threat Information eXpression (STIX™), which is a uniform format for the actual threat information, and Trusted Automated eXchange of Indicator Information (TAXII™), which is an open standards protocol for routing that threat information.

For example, a financial institution could use Soltra Edge to instantly import threat information from multiple sources, including threat intelligence vendors, FS-ISAC other Information Sharing and Analysis Centers (ISACs), Computer Emergency Response Teams (CERTs), industry bodies and private sector vendors, convert it automatically into STIX format, deduplicate the data, prioritize the most important intelligence and then route that to a security device that supports STIX and TAXII in order to block a suspected threat on a corporate network, all in a matter of seconds. Each entity using Soltra Edge maintains its own data, sets its own security controls for the type of information shared and manages its own sharing relationships with other entities.

Soltra Edge represents a cross-industry initiative, with over 150 FS-ISAC members, as well as representatives from other critical sectors and ISACs, government entities and the private sector, contributing to the requirements, architecture and design of the service. Soltra Edge has 45 companies piloting the solution. Soltra Edge leverages best practices established over the past 14 years for sharing information within and between industry sectors.

“Soltra Edge will provide companies with stronger safeguards to protect against cyber attacks. In the current environment, cyber attackers can use a few hundred dollars worth of software and the power of cloud computing to launch attacks that require exponential resources to defend and mitigate,” said Mark Clancy, CEO of Soltra, CISO of DTCC and Board Member of FS-ISAC. “Soltra Edge is a dynamic, new approach that enables companies across the globe to quickly share threat intelligence and substantially reduce the cost and effort to defend critical technology systems.”

“We need to re-imagine cyber security and get beyond a silo’d organization, disparate vendor mentality. Soltra Edge is all about collaboration,” says Bill Nelson, president of Soltra and president and CEO of FS-ISAC. “Soltra Edge will do for cyber security what networking protocols did for computer networks decades ago. It will connect thousands of entities globally, enable them to communicate using a consistent language and help organizations take immediate action. The more critical entities that use Soltra Edge and the more cyber security vendors that plug into Soltra Edge using adapters, the more potent the defense for all those connected.”

Comments: (0)