| CACAO Security Playbooks (Collaborative Automated Course of Action Operations) |
OASIS |
International
United States |
Information Model
|
open
|
83.0
Current
|
| CSAF (Common Security Advisory Framework) |
OASIS |
International
United States |
Exchange Schema
|
open
|
—
|
| CycloneDX |
OWASP / Ecma |
— |
Information Model
|
open
|
83.0
Current
|
| IODEF (RFC 7970) |
IETF |
International
United States |
Exchange Schema
|
open
|
60.2
Modernizing
|
| KMIP (Key Management Interoperability Protocol) |
OASIS |
International
United States |
Information Model
|
open
|
68.0
Modernizing
|
| MISP core format (Malware Information Sharing Platform) |
MISP Project / CIRCL |
— |
Exchange Schema
|
—
|
—
|
| OCSF (Open Cybersecurity Schema Framework) |
OCSF / Linux Foundation |
International
United States |
Information Model
|
open
|
73.0
Current
|
| OSV Schema (Open Source Vulnerability) |
OpenSSF |
International
United States |
Exchange Schema
|
open
|
74.2
Current
|
| OpenC2 |
OASIS |
International
United States |
Exchange Schema
|
open
|
66.7
Modernizing
|
| SCAP (Security Content Automation Protocol) |
NIST |
United States
national body |
Information Model
|
—
|
—
|
| SPDX |
Linux Foundation |
International
United States |
Information Model
|
open
|
87.1
Current
|
| STIX / TAXII |
OASIS CTI TC |
— |
Information Model
|
open
|
70.0
Modernizing
|
| Sigma detection rules |
SigmaHQ community |
— |
Exchange Schema
|
—
|
59.7
Modernizing
|
| X.509 / PKIX certificate profile |
ITU-T / IETF |
International
United States |
Information Model
|
spec sold
|
43.0
Legacy
|
| XACML |
OASIS |
International
United States |
Information Model
|
open
|
68.0
Modernizing
|
| YARA rules |
VirusTotal / community |
— |
Exchange Schema
|
—
|
—
|
