OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: An extension definition for TLP 2.0 data markings


Hi all,

 

DHS/CISA has asked MITRE to contribute an extension definition for the recently released TLP 2.0 data markings.  It is available from the STIX common object repository here.

 

The definition includes documentation, a JSON schema and examples.  The TLP 2.0 objects are themselves found in the objects/marking-definition directory at the top level on that repository.  The extension definition object for TLP 2.0 can be found in objects/extensions.

 

Note, that in a similar manner to the TLP 1.0 data marking objects, there will be no need to ever share a TLP 2.0 data marking object.  Simply use the ids of the TLP 2.0 objects found in the repository when marking objects.  Because there is no reason to ever include a TLP 2.0 object in a bundle when sharing, it probably is not necessary to validate any TLP 2.0 object.  This alleviates the requirement of using the TLP 2.0 JSON schema when validating.  However, it is available if desired.

 

This table indicates the id for each TLP 2.0 “color”

 

TLP 2.0 “color”

Marking definition object’s id

clear

marking-definition--94868c89-83c2-464b-929b-a1a8aa3c8487

green

marking-definition--bab4a63c-aed9-4cf5-a766-dfca5abac2bb

amber

marking-definition--55d920b0-5e8b-4f79-9ee9-91f868d9b421

amber+strict

marking-definition--939a9414-2ddd-4d32-a0cd-375ea402b003

red

marking-definition--e828b379-4e03-4974-9ac4-e53a884c97c1

 

Thanks!

 

                Rich

 

--

Rich Piazza

Lead Cyber Security Engineer

The MITRE Corporation

781-271-3760

––––––––––––––––––––––––––––––––––––

MITRE - Solving Problems for a Safer World™

 



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]