Security experts, vendors, business and the NSA are developing a standardized language that rather than autonomously understands threats, acts on them.