Arango TAXII Server

Overview

Arango TAXII Server is a production ready implementation of a TAXII 2.1 Server designed to work with ArangoDB.

tl;dr

Watch the demo.

Install

Download and configure

# clone the latest code
git clone https://github.com/muchdogesec/arango_taxii_server
cd arango_taxii_server
# fetch submodules
git submodule update --init --recursive

Configuration options

Arango TAXII Server has various settings that are defined in an .env file.

To create a template for the file:

cp .env.example .env

To see more information about how to set the variables, and what they do, read the .env.markdown file.

Build the Docker Image

sudo docker compose build

Start the server

sudo docker compose up

Access the server

The webserver (Django) should now be running on: http://127.0.0.1:8000/

You can access the Swagger UI for the API in a browser at: http://127.0.0.1:8000/api/schema/swagger-ui/

Useful supporting tools

• TAXII 2.1 Specification
• STIX 2.1 Specification

Other TAXII server implementations

We realise not everyone will want to use ArangoDB. Here are some other open-source TAXII server options you could consider;

• OASIS TC Open Repository: TAXII 2 Server Library Written in Python
• A cyber threat intelligence server based on TAXII 2 and written in Golang
• TAXII server implementation in Python from EclecticIQ

Support

If you are a paying DOGESEC customer, please contact our support team.

For everyone else, minimal support provided via the DOGESEC community.

License

Apache 2.0.