cti-stix — archive

Applying data markings

From: John Wunder <[email protected]>
To: [email protected]
Date: Thu, 03 Dec 2015 20:28:00 -0000

Yeahhh I saw that but earlier we had talked about having 2-3 topics at a time so I sent this anyway…if nothing else it’s good read-ahead material and I’m kinda confident that if we limit ourselves to the top 2-3 issues we can stay focused. We just don’t want like 8 at a time and we need to make sure to close on the ones we do discuss. John On Dec 3, 2015, at 3:17 PM, Terry MacDonald < [email protected] > wrote: But we’re going to talk about Sightings first J . Terry MacDonald Senior STIX Subject Matter Expert SOLTRA An FS-ISAC and DTCC Company +61 (407) 203 206 [email protected] From: [email protected] [ mailto:[email protected] ] On Behalf Of Wunder, John A. Sent: Friday, 4 December 2015 7:11 AM To: [email protected] Subject: [cti-stix] Applying data markings All, I developed this proposal to handle the application of data markings in STIX 2.0: https://github.com/johnwunder/data-markings . Note: it doesn't address the format of the markings themselves (improvements to TLP, the work in FIRST, etc), just how those markings get applied to content. I this this meets the need for simplicity for object-level markings as we’ve talked about many times while still allowing for more complicated field-level markings for those that need them. Please review the proposal and let’s talk about feedback. If this looks good to everyone we could use it as the solution for issue #231 (currently #2 on our roadmap). John