Call for CTI De-Fanging Conventions (Draft Motion)

[Patrick Maroney <Pmaroney@Specere.org>]

One CTI Standard that would provide broad applicability and immediate value to the overall CTI Community would be the definition and adoption of a set of standards and methods for "de-fanging" Indicators and weaponized/malicious artifacts.

Draft Motion:

The OASIS CTI TC shall develop Normative CTI standards for "de-fanging" Indicators and weaponized/malicious artifacts.  

This includes non-normative methods for "De-Fanging" /"Re-Fanging" and compliance validation of STIX and CybOX data.

Format of this specification shall be universal in nature with specific enumerations within STIX/CybOX* referencing this "default" convention.

* Depending on the outcomes of TAXII functionality discussions this standard may be applicable to TAXII in addition to STIX and CybOX.  (i.e., is TAXII processing/parsing atomic level objects and making decisions based on content and marking?, Query functionality within TAXII).

Patrick Maroney
President
Integrated Networking Technologies, Inc.
Desk: (856)983-0001
Cell: (609)841-5104
Email: pmaroney@specere.org