OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [cti] CybOX Datatype Refactoring/Deprecation

On 26.02.2016 06:58:23, Crawford, David wrote:
> What if I want to search by CIDR ranges? Now every IPv4 field has to
> be pulled from the DB, one by one, de-fanged and compared at the
> application layer where I’ve lost any efficiencies of the database
> engine. The same applies for domains or URLs; if I want to search by
> wildcard, or regex patterns every indicator has to be pulled into
> the application layer de-fanged, compared, etc., etc.

Excellent point, David.

Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
"No matter how hard you try, you can't make a baby in much less than 9
months. Trying to speed this up *might* make it slower, but it won't
make it happen any quicker." --RFC 1925

Attachment: signature.asc
Description: PGP signature

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]