STIX Profile 概览 白皮书公益 译文项目 V0.1（草案）文档信息 原文名称 原文作者 原文发布日期 作者简介原文发布单位 MITRE 原文出处 https://stixproject.github.io/ 译者 小蜜蜂公益翻译组 校对者 小蜜蜂公益翻译组 免责声明  本文原文来自于互联网的公共方式，由“安全加”社区出于学习交流的目的进行翻译，而无任何商业利益的考虑和利用， “安全加”社区已经尽可能地对作者和来源进行了通告，但不保证能够穷尽，如您主张相关权利，请及时与“安全加” 社区联系。  “安全加”社区不对翻译版本的准确性、可靠性作任何保证，也不为由翻译不准确所导致的直接或间接损失承担责任。在使用翻译版本中所包含的技术信息时，用户同意“安全加”社区对可能出现的翻译不完整、或不准确导致的全部或 部分损失不承担任何责任。用户亦保证不用做商业用途，也不以任何方式修改本译文，基于上述问题产生侵权行为的， 法律责任由用户自负。 小蜜蜂公益翻译组 “安全加”社区目录 何为“STIX Profile ”？ ················································································· 2 为何使用 Profile? ·························································································· 3 分层Profile ·························································································· 4 Profile呈现方法 ···························································································· 5 现用电子表格格式 ················································································· 5 机器可处理 Profile ················································································· 5 支持与开发 Profile ················································································· 5 开发及使用 Profile ························································································· 6 1. 收集Profile需求 ··············································································· 6 2. 写作Profile ······················································································ 6 3. 利用Profile进行数据交换 ··································································· 6 Profile要求 /规定 ························································································· 7STIX Profile 概览白皮书 V0.1公益 译文项目 2017 1 本文讨论、阐述了 STIX Profile，并就其提出了相应要求。 STIX指“结构化威胁信 息表达”，是由多人群策群力共同定义、开发的描述结构化网络威胁信息的标准化语言。 STIX语言用以描述各种潜在的网络威胁信息， 表达准确、 灵活， 具有可扩展性， 可自动化， 并易于理解。欢迎各方人士踊跃加入这个开放、合作的群体一起推动 STIX及其 Profile 概念的发展。 本文假设读者已熟知 STIX数据模型及其部件。 欲了解更多 STIX相关信息，请访问 http://stix.mitre.org