This Taxonomy did come from an existing well vetted solution. aka the Intel Threat Agent work. But given that work applies to general threat actors, we are trying I tailor it more specifically to the cyber space.
The reason I am looking to add a few values is I have been reviewing every taxonomy I can find and make sure our terms and definitions cover everything that cerebrally exists.
Bret
Sent from my Commodore 64
On Aug 7, 2016, at 12:42 PM, Patrick Maroney <> wrote:
.02: Like Sophistication, we should directly adopt an existing, well vetted, Taxonomy.
@Patrick/ISightPartners or @EclecticIQ: Can you provide reference?
Patrick Maroney
President
Integrated Networking Technologies, Inc.
Desk: (856)983-0001
Cell: (609)841-5104
Email:
On Sun, Aug 7, 2016 at 12:15 AM -0400, "Jordan, Bret"
<> wrote:
All,
Intrusion Sets and Threat Actors both use the Attack Motivations vocabulary. Right now we have the following terms in that vocab:
accidental
coercion
dominance
ideology
notoriety
organizational-gain
personal-gain
personal-satisfaction
revenge
unpredictable
I propose that we add the following thee terms to this list, I missed them when I was putting this list together.
amusement
advantage (competitive, political, economic)
anarchy
Thanks,
Bret
Bret Jordan CISSP
Director of Security Architecture and Standards | Office of the CTO
Blue Coat Systems
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
