Updates - TAC Vocabularies

[Vasileios Mavroeidis <vasileim@ifi.uio.no>]

TAC TC,

Yesterday at the TC meeting we discussed our intention to start creating standards-based vocabularies, such as threat actor types and motivations, for characterizing threat actors, intrusion sets, etc., for interoperability reasons and more reliable classification. 

The aim is to facilitate broad adoption and why not to be the industry standard vocabularies. Thus, it will be easier to parse, correlate, and analyze info from different sources, that being threat information sharing standards, TIPs that use different taxonomies, intel reports, and more.

We decided to start with populating the threat actor type and motivations vocabularies that are of particular operational value.

For those interested in participating in that effort, we have created a new google doc using the OASIS template. By default, you can only comment. 

https://docs.google.com/document/d/1npHwiMIbhTd55aN7dOXKBcgg7RrBmW9VR7NalV2h0iY/edit?usp=sharing

If anybody is interested in being an editor, please let me, Ryan, or Jane know.

Comments are welcome.

Best,

Vasileios