[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [cti-cybox] IP Address Notation (or: I Love CIDR When It's Talking About More Than One IP Address)
This also makes great sense to me… Terry MacDonald Senior STIX Subject Matter Expert SOLTRA | An FS-ISAC and DTCC Company +61 (407) 203 206 |
terry@soltra.com From: cti-cybox@lists.oasis-open.org [mailto:cti-cybox@lists.oasis-open.org]
On Behalf Of Barnum, Sean D. +1 :-) From:
<cti-cybox@lists.oasis-open.org> on behalf of Steve Cell <ikirillov@mitre.org> I rather agree with Alex that a lot of these Objects are created by hand today and likely will be for the foreseeable future, so I'm OK with specifying that if
no CIDR block is found, the IP Address is implicitly /32 (or /128 for IPv6). However, this is something we’ll need to make very clear in the specification and documentation. Are there any other thoughts on this? Regards, Ivan From:
<cti-cybox@lists.oasis-open.org> on behalf of Alexander Foley <alexander.foley@bankofamerica.com> People will be creating these objects by hand. However, if the standard allows for the lack of /32 to mean an individual IP address I think that’s
great. Had the group ever considered the addition of a CIDR-specific object? Thanks, Alex From: Jordan, Bret [mailto:bret.jordan@bluecoat.com]
I think it is completely reasonable for the UI tool to add a /32 to an address. People should not be creating these objects by hand. Further, I also think it is also reasonable to to say that if
no /32 is found, then it is just an IP address and the standard should allow for that. Hopefully, long term, all tools will just do that for the user behind the scenes, but until then, I think it is okay for the standard to just allow it. Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards | Office of the CTO Blue Coat Systems PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
This message, and any attachments, is for the intended recipient(s) only, may contain information that is privileged, confidential and/or proprietary
and subject to important terms and conditions available at
http://www.bankofamerica.com/emaildisclaimer. If you are not the intended recipient, please delete this message. |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]