Re: [cti-cybox] CybOX Object Survey

["Kirillov, Ivan A." <ikirillov@mitre.org>]

Hi Jerome,

I like the idea of tags – assuming we can agree to a fairly limited, normalized set of tags, I think they would be easily indexable (searchable), and useful for potentially creating trees or other groupings further down the road. I’ve created a new issue in our GitHub tracker to keep track of this general topic [1], so I suggest that we share any specific tags, use cases, etc. there. 

Going forward, until we come up with a better solution, I’m inclined to use GitHub as the central repository for tracking these issues and discussions. Doing so by email is just painful and not really workable, and the wiki is a bit cumbersome and hard to use. 

[1] https://github.com/CybOXProject/schemas/issues/373

Regards,

Ivan

From: Jerome Athias
Date: Monday, August 3, 2015 at 9:57 AM
To: Ivan Kirillov
Cc: "cti-cybox@lists.oasis-open.org"
Subject: Re: [cti-cybox] CybOX Object Survey

Hi,

While categorization, grouping or trees of objects is difficult due to numerous potential use cases, I found internal tagging of the objects an interesting approach. (E.g. With keywords like reverse engineering, forensics, pcap, etc.)

It could help identifying use cases, and attract potential new interests/adopters.

Furthermore, tagging ( or relationships ;)) with common tools, and tools ouputs mapping with the objects/properties could also help interest/adoption, and while showing quality (RFC based, etc.) and completeness (or not) of the objects, would help to build bindings/convention tools.

E.g. Sysinternals2CybOX, wireshark2CybOX, etc.

In case of interest, how could we share tags, use cases, tools lists and mappings?

Best regards

On Monday, August 3, 2015, Kirillov, Ivan A. <ikirillov@mitre.org> wrote:

All,

Based on some discussion during our SC telecon last week, I’ve created an informal survey to get a sense of which Objects are most prominently used by the community. It can be found here: https://www.surveymonkey.com/r/F6WKSMF

Feel free to pass it along to your colleagues or anyone else who may have input – the more the merrier!

Regards,

Ivan