Re: [cti-stix] RE: Intrusion Sets

[Jerome Athias <athiasjerome@gmail.com>]

I wonder if these sets would be better represented (and used) with a
grouping a la Campaign at STIX level,
or would it be more efficient with a "Atom Syndication Format feed"
like approach at the TAXII level. (in case we would take a direction
like https://github.com/CISecurity/ROLIE/blob/master/draft-ietf-mile-rolie-02.xml
)

2016-06-03 15:35 GMT+03:00 Katz, Gary CTR DC3/DCCI <Gary.Katz.ctr@dc3.mil>:
> Bret,
>    Since this is something that some of us are going to need in order to share threat information, I'd like to have it in the initial release.  Can Paul and I work on something and put out a suggestion for review by next Friday?  My goal is to have something as similar as possible to the properties captured in Campaign.
>
> -Gary
>
> -----Original Message-----
> From: cti-stix@lists.oasis-open.org [mailto:cti-stix@lists.oasis-open.org] On Behalf Of Jordan, Bret
> Sent: Thursday, June 02, 2016 6:16 PM
> To: cti-stix@lists.oasis-open.org
> Subject: [Non-DoD Source] [cti-stix] Intrusion Sets
>
> After this weeks working call, I think I understand what Gary wants out of the Intrusion Set TLO and I think I can get on board with it.  However, I do not think we will be able to deliver it for the summer release.  I just do not feel like we fully understand what properties will be needed yet. Therefor I would like to suggest that we push Intrusion Sets off to the Winter release...  Is everyone okay with that?
>
>
>
> Thanks,
>
> Bret
>
>
>
> Bret Jordan CISSP
> Director of Security Architecture and Standards | Office of the CTO Blue Coat Systems PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>