TAPIO: Targeted Attack Premonition using Integrated Operational Data Sources Invincea Labs

This might be of interest to the ontology / data model folks. This is from a 2014 DARPA funded project that uses semantic ontologies to apply reasoning to incident response. This project also makes uses of existing STIX, CYBOX, etc data sets.  

TAPIO: Targeted Attack Premonition using Integrated Operational Data SourcesInvincea Labs

http://www.slideshare.net/Invincea/invincea-tapio-ontology-csaw-2014-short-ppt