Applying data markings

From
Terry MacDonald <>
Date
2015-12-03T20:34:00+00:00
ID
Thread
Applying data markings
J



Terry MacDonald

Senior STIX Subject Matter Expert

SOLTRA
   An FS-ISAC and DTCC Company

+61 (407) 203 206
  
From:
Wunder, John A. [mailto:]

  Sent:  Friday, 4 December 2015 7:28 AM
To:  Terry MacDonald <>
Cc:  
Subject:  Re: Applying data markings


  Yeahhh I saw that but earlier we had talked about having 2-3 topics at a time so I sent this anyway…if nothing else it’s good read-ahead material and I’m kinda confident that if we limit ourselves to the top 2-3 issues we can stay focused.
  We just don’t want like 8 at a time and we need to make sure to close on the ones we do discuss.



  John



  On Dec 3, 2015, at 3:17 PM, Terry MacDonald < 
> wrote:



But we’re going to talk about Sightings first

J  .



Terry MacDonald

Senior STIX Subject Matter Expert

SOLTRA
   An FS-ISAC and DTCC Company

+61 (407) 203 206
  
From:
    [ mailto: ]
  On Behalf Of  Wunder, John A.
  Sent:  Friday, 4 December 2015 7:11 AM
To:

Subject:  [cti-stix] Applying data markings


  All,



  I developed this proposal to handle the application of data markings in STIX 2.0:  https://github.com/johnwunder/data-markings . Note: it doesn't address the format of the markings
  themselves (improvements to TLP, the work in FIRST, etc), just how those markings get applied to content.



  I this this meets the need for simplicity for object-level markings as we’ve talked about many times while still allowing for more complicated field-level markings for those that need them. Please review the proposal and let’s talk about
  feedback. If this looks good to everyone we could use it as the solution for issue #231 (currently #2 on our roadmap).



  John