Cyber Threat Information sharing: A category-theoretic approach

In this paper, we present the use of a category theory based approach to cyber threat information sharing. This choice is motivated by the fact that category theory allows an abstraction that can be used when one has to deal with diverse systems and it is also useful in describing an existing structure like STIX (Structured Threat Information eXpression). STIX will be described, a brief review of category theory as well as its use in data migration is given, the Functorial Query Language (FQL) is introduced and is used to implement the STIX schema. Finally the concept of olog is presented as knowledge representation.