Re: [EXT] [cti] Topic for today's working call: free-form discussion of security considerations pertaining to STIX2/TAXII2

[Bret Jordan <Bret_Jordan@symantec.com>]

All,

In preparation for the call today, please read the following sections 

RFC 7970 Section 9 (IODEF Security Considerations) - This will be somewhat similar to STIX with some hand waving

https://tools.ietf.org/html/rfc7970#section-9

RFC 8322 Section 9 (ROLIE Security Considerations) - This is very similar to TAXII

https://tools.ietf.org/html/rfc8322#section-9

Bret

---

From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Trey Darley <trey@newcontext.com>
Sent: Tuesday, June 12, 2018 9:34 AM
To: OASIS CTI TC list
Subject: [EXT] [cti] Topic for today's working call: free-form discussion of security considerations pertaining to STIX2/TAXII2

 

Hi, y'all -

If brainstorming all the ways that STIX2/TAXII2 could be abused sounds
like an interesting discussion, you should join today's working call.

--
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"The newest computer can merely compound, at speed, the oldest problem
in the relations between human beings, and in the end the communicator
will be confronted with the old problem, of what to say and how to say
it." --Edward R. Murrow