Call for CTI De-Fanging Conventions (Draft Motion)

One CTI Standard that would provide broad applicability and immediate value to the overall CTI Community would be the definition and adoption of a set of standards and methods for "de-fanging" Indicators and weaponized/malicious artifacts.

Draft Motion:

The OASIS CTI TC shall develop Normative CTI standards for "de-fanging" Indicators and weaponized/malicious artifacts.  

This includes non-normative methods for "De-Fanging" /"Re-Fanging" and compliance validation of STIX and CybOX data.

Format of this specification shall be universal in nature with specific enumerations within STIX/CybOX* referencing this "default" convention.

* Depending on the outcomes of TAXII functionality discussions this standard may be applicable to TAXII in addition to STIX and CybOX.  (i.e., is TAXII processing/parsing atomic level objects and making decisions based on content and marking?, Query functionality
 within TAXII).

Patrick Maroney

President

Integrated Networking Technologies, Inc.

Desk: 
(856)983-0001

Cell: 
(609)841-5104

Email: