Re: [cti-cybox] CybOX Object Selection

["Jason Keirstead" <Jason.Keirstead@ca.ibm.com>]

". Maybe what we really need is a “malware analysis” subset, a “digital forensics” subset, etc."

Yep that is what I am saying I suppose.

Cybox Base
Cybox Network
Cybox Digital Forensics
Cybox Malware

That way a product can more easily specify what they support. And, people looking for products can more easily align expectations.

-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com

Without data, all you are is just another person with an opinion - Unknown