search

oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2
https://stix2.readthedocs.io/
BSD 3-Clause "New" or "Revised" License
356 stars 113 forks source link

CISA TLP definition updates #583

Open chadillac opened 5 months ago

chadillac commented 5 months ago

CISA has new guidance on TLP markings and modifications... the stix2(.1) common.py configs do not reflect this more recent guidance...

https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage

TLP: WHITE --> TLP: CLEAR +TLP: AMBER+STRICT

These markings should be included in common config as they're officially part of the guidance now and already in use and will be in use going forward.

rpiazza commented 5 months ago

@chadillac,

An extension has been implemented to support TLP2 - see:

https://github.com/oasis-open/cti-stix-common-objects/tree/main/extension-definition-specifications/tlp-2.0

If this is satisfactory for you needs, please close this issue.

tlansec commented 1 week ago

What's the decision making process around adding a dependency to that repo rather than simply adding it to the already-embedded list of acceptable TLPs here?

https://github.com/oasis-open/cti-python-stix2/blob/master/stix2/v21/common.py#L292