search

oasis-tcs / cti-stix2

OASIS CTI TC: Provides issue tracking and wiki pages for the STIX 2.x Work Products
https://github.com/oasis-tcs/cti-stix2
Other
23 stars 9 forks source link

Add IEP as a marking type #80

Open johnwunder opened 6 years ago

johnwunder commented 6 years ago

We've discussed adding Information Exchange Protocol (from FIRST) as a mechanism to mark data in STIX.

johnwunder commented 6 years ago

Need to review this change with the community again.

johnwunder commented 6 years ago

Text from Jason, to add to section 5:

Data marking support in this standard is present in order to facilitate data interchange within and amongst trust group communities. While the standard defines the methodology to communicate data markings, and also includes standard definitions for select marking types, it does not attempt to define how individual software implementations must or must not behave with respect to any individual marking. Understanding that the behavior of any individual software implementation with regard to data markings is highly context-specific and thus out of scope of this standard, the support of any specific marking type is considered OPTIONAL.

ejratl commented 2 years ago

Since this didn't make it into STIX 2.1, it would be great to see this proposed as an extension and submitted to the Common Objects Repository following the example of ACS markings. We need a champion for this activity.