usnistgov / vulntology

Development of the NIST vulnerability data ontology (Vulntology).
https://pages.nist.gov/vulntology
Other
36 stars 11 forks source link

Consider adding Threat mechanisms #29

Open Chris-Turner-NIST opened 5 years ago

Chris-Turner-NIST commented 5 years ago

User Story:

Currently there are no assignable values to assist with establishing current threat levels of a given vulnerability. What can we capture within the Vulntology to better represent these data points?

Possible Data of interest:

Goals:

Establish consistent location for threat information within the model Consider previous and currently discussed Temporal/Threat concepts from CVSS SIG and other organizations and include as objects or properties to existing objects.

Dependencies:

N/A

Acceptance Criteria

david-waltermire commented 4 years ago

We should take a look at MITRE ATT&CK.