[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: An extension definition for TLP 2.0 data markings
Hi all, DHS/CISA has asked MITRE to contribute an extension definition for the recently released TLP 2.0 data markings. It is available from the STIX common object repository
here. The definition includes documentation, a JSON schema and examples. The TLP 2.0 objects are themselves found in the objects/marking-definition directory at the top level on that repository. The extension
definition object for TLP 2.0 can be found in objects/extensions. Note, that in a similar manner to the TLP 1.0 data marking objects, there will be no need to ever share a TLP 2.0 data marking object. Simply use the ids of the TLP 2.0 objects found in the repository when
marking objects. Because there is no reason to ever include a TLP 2.0 object in a bundle when sharing, it probably is not necessary to validate any TLP 2.0 object. This alleviates the requirement of using the TLP 2.0 JSON schema when validating. However,
it is available if desired. This table indicates the id for each TLP 2.0 “color”
Thanks! Rich -- Rich Piazza Lead Cyber Security Engineer The MITRE Corporation 781-271-3760 –––––––––––––––––––––––––––––––––––– MITRE - Solving Problems for a Safer World™ |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]