RE: [EXT] [cacao] Remaining work items

Regarding the attack target types â I agree with Bret that something seems off, but I canât articulate anything specific at the moment. Iâll be thinking about it and will respond with details soonâ

Dez

From: cacao@lists.oasis-open.org <cacao@lists.oasis-open.org> On Behalf Of Bret Jordan
Sent: Thursday, October 27, 2022 1:24 PM
To: cacao@lists.oasis-open.org
Subject: [EXT] [cacao] Remaining work items

All,

We have very few remaining work items that need to be addressed before we can ship the next version of the CACAO specification. We really need people to speak up and voice their opinions on the following:

1) MITRE/DHS has proposed a new property to track some of the features of a playbook. Several people seem to like this and support this. However, there is some concern on if this property should be "required" or if it should be "optional". Allan strongly views this should be optional. MITRE/DHS really want it to be required. But I have not heard from the rest of you.

Please respond to this email with your views on this subject.

2) A while back Allan proposed the attack target types. I think we all generally agree that this is a good idea. However, when I have played around with it, it feels like there are some minor issues with the modeling. I have not yet been able to put my finger on it. To be clear I really like the idea of the Attack stuff that Allan proposed and really want it. But something just feels off with it. Has anyone else seen issues while playing around with it?

Bret

cacao message