Re: [cti-stix] Re: [cti-cybox] Revoke Cybox Observable

From
Trey Darley <>
Date
2015-11-11T14:38:36+00:00
ID
Thread
Re: [cti-stix] Re: [cti-cybox] Revoke Cybox Observable
On 11.11.2015 13:44:54, Cory Casanave wrote:
> 
> Most of the infrastructure is already in place to do this,
> relationships have identity. Adding “second order” statements about
> them such as “superseded by” or “end date” provides for a very
> robust distributed knowledge base, which is what we are
> fundamentally trying to support.
> 

+1

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"No matter how hard you push and no matter what the priority, you
can't increase the speed of light." --RFC 1925