Re: [cti] Threat Actor items

["Wunder, John A." <jwunder@mitre.org>]

This is perfect, thanks Tim. I updated the text and changed “Operational” to “Practitioner”.

 

From: <cti@lists.oasis-open.org> on behalf of "Casey, Timothy P" <timothy.p.casey@intel.com>
Date: Friday, July 15, 2016 at 2:16 PM
To: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
Subject: [cti] Threat Actor items

 

Here is a suggested re-wording of the “Contest” vocabulary item for Attack Resource Level for Threat Actor:

 

“A short-lived and perhaps anonymous interaction that concludes when an ad-hoc group of participants have achieved a single goal. For example, people who break into systems just for thrills or prestige may hold a contest to see who can break into a specific target first. It also includes announced "operations" to achieve a specific goal, such as the original "OpIsrael" call for volunteers to disrupt all Israel internet functions for a day. Minimum Sophistication level: ???.”

 

There were some changes suggested to Sophistication Level that will need to be reflected in the other Attack Resource Level descriptions.  This one was formerly “Operational,” indicating a moderate level of sophistication but little long-term planning or development capabilities.

 

If there are other items for updating please let me know.

 

Tim