AlienVault introduces threat intelligence forum

Open-source security information and event management (SIEM) vendor AlienVault has launched a system for sharing threat intelligence.

The AlienVault Open Threat Exchange is free for contributors and is geared toward open-source security information and event management (OSSIM) users and AlienVault customers.

According to the corporate, it's miles built into the OSSIM and its unified security management platform. It said that it automatically cleanses and collects threat data from various security devices including firewalls, proxy servers, web servers, anti-virus systems, intrusion detection and prevention systems, and feeds the newest threat intelligence back into participating OSSIM deployments.

The AlienVault Research Lab then reviews and validates all threat data making sure that only probably the most accurate and actionable intelligence is published.

Roger Thornton, CTO of AlienVault, said: “The OSSIM community is spread among many industries and countries, and consists of organisations of all sizes, making it the foremost diverse and comprehensive threat feed possible.

“Other threat intelligence services are usually in line with data from a single variety of security device, are available in to simply a select set of users, or require a subscription. Our Open Threat Exchange delivers on our mission of harnessing collective intelligence for the average good by providing the broadest scope of threat intelligence data, sourced from the most important community of SIEM deployments, freely to anyone who contributes.”

Jose Luis Gilperez, director of product development and security innovation at Telefonica Digital, said: “With the AlienVault Open Threat Exchange, an attack on any a part of our network or on any member of the AV-OTX community alerts everyone and helps us all to reply to threats much more effectively.”