Recommendation Report

I work for Peraton, which uses the Oasis open-source STIX V2.1 specification as a cybersecurity solution. The software graphically displays cybersecurity threats so analysts can better see overlapping relationships. The current dashboard requires multiple data-entry steps that are easy for an analyst to miss or not understand and which can lead to an incomplete STIX bundle. Furthermore, the specification does not address critical aspects of the dashboard. My recommendation report proposes redesigning the input page for a better user experience and adding additional information—which could also be added to the specification—to better describe dashboard inputs.

There are several aspects to the problem. The first will be to reconsider the use of several software engineering terms that are not relevant to the user's experience. The second is an analysis of both data-to-data relationships and user-to-data relationships. Understanding these interactions should provide a smoother method of user interaction with the interface.

 

Finally, minor improvements in design cues will also aid in the user experience. Currently, the interface overwhelms the analyst with potential data inputs in order to create a single component in a larger relationship. Updating the User Interface (UI) to guide the analysts inputting of information will make for a faster and easier User Experience (UX).

John Huston