08/11/2026
Great example of turning cybersecurity standards into something you can reason over.
CyberTerrain transforms STIX 2.1 data into a standards-compliant OWL knowledge graph, preserving provenance while enabling richer semantic relationships across ATT&CK, CWE, CAPEC, NIST and CIS.
The graph shown in the post is rendered directly from a SPARQL query against an AllegroGraph repository using Gruff.
From strings to things — and from threat data to connected, queryable cybersecurity knowledge.
Deep Dives STIX to STONES ByRyan Hohimer August 11, 2026 Faithfully Changing Strings to Things STIX 2.1 is the industry’s shared language for describing threats — intrusion sets, attack patterns, indicators, and the relationships between them, exchanged as JSON. It’s widely adopted, and for go...