Re: [EXT] [cti] Topic for today's working call: free-form discussion of security considerations pertaining to STIX2/TAXII2

All,

In preparation for the call today, please read the following sections 

RFC 7970 Section 9 (IODEF Security Considerations) - This will be somewhat similar to STIX with some hand waving

https://tools.ietf.org/html/rfc7970#section-9

RFC 8322 Section 9 (ROLIE Security Considerations) - This is very similar to TAXII

https://tools.ietf.org/html/rfc8322#section-9

Bret

From:  <> on behalf of Trey Darley <>

Sent: Tuesday, June 12, 2018 9:34 AM

To: OASIS CTI TC list

Subject: [EXT] [cti] Topic for today's working call: free-form discussion of security considerations pertaining to STIX2/TAXII2

 

Hi, y'all -

If brainstorming all the ways that STIX2/TAXII2 could be abused sounds

like an interesting discussion, you should join today's working call.

-- 

Cheers,

Trey

++--------------------------------------------------------------------------++

Director of Standards Development, New Context

gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338

++--------------------------------------------------------------------------++

--

"The newest computer can merely compound, at speed, the oldest problem

in the relations between human beings, and in the end the communicator

will be confronted with the old problem, of what to say and how to say

it." --Edward R. Murrow