search

MISP / misp-taxonomies

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
https://www.circl.lu/doc/misp-taxonomies/
Other
257 stars 135 forks source link

PAP: Difference between WHITE and GREEN? #260

Open clenk opened 1 year ago

clenk commented 1 year ago

Hi,

I'm trying to better understand PAP markings and the only documentation I can find is in this repository and at https://www.vanimpe.eu/2020/12/28/how-to-support-defenders-with-the-permissible-actions-protocol/.

Specifically I'm trying to understand the difference between PAP:WHITE and PAP:GREEN. WHITE has no restrictions, and the definition for GREEN describes what is allowed, but not what is prohibited in GREEN. So what is the difference between PAP:WHITE and PAP:GREEN?

Apologies if this is the wrong place to ask.

Wachizungu commented 4 months ago

https://cert.ssi.gouv.fr/csirt/sharing-policy/

Non intrusive (green) vs potentially intrusive (white) was somewhat my interpretation as well. I'll double check with MISP core devs when I can.