Face to Face - RM4 - Prop 9 relationships

So one thought I want to inject which is hard to do on the phone.  We should also talk about the use of Reference Data as binding glue when dealing with relationships.  For example why does everyone on the planet need to create their own STIX object in their
 own namespace for a "spear phishing" TTP. So that Org1 and Org2 "Spear phishing" TTPs are different things as they are unique STIX objects when in fact they really should have been the same. Yes there are variants of Spear Phishing which may also be generic
 TTP like say Whaling and others that are specific to a Threat Actor which will related to Spear Phishing are really more unique.

-Mark

Mark Clancy

Chief Executive Officer

SOLTRA
|
An FS-ISAC and DTCC Company

+1.813.470.2400
office
|
+1.610.659.6671 US mobile

|  +44 7823 626 535  UK mobile


| soltra.com

 

One organization's incident becomes everyone's defense.

 

From:  <> on behalf of Alexander Foley <>

Sent: Thursday, January 14, 2016 3:03 PM

To: 

Subject: [cti] Groups - OASIS CTI TC F2F - STIX 1b.pdf uploaded

 

Document Name: 
OASIS CTI TC F2F - STIX 1b.pdf

Description

Strawman #2 (Sean Barnum + Group) 

Download Latest Revision

Public Download Link

Submitter: Alexander Foley

Group: OASIS Cyber Threat Intelligence (CTI) TC

Folder: Calendar Documents

Date submitted: 2016-01-14 12:03:07