CTI STIX Subcommittee

 View Only

Infrastructure SDO sponsorship feedback

  • 1.  Infrastructure SDO sponsorship feedback

    Posted 01-28-2020 21:25
      |   view attached




    Hi, all
     
    It came up today whether LookingGlass had any feedback on the Infrastructure SDO as part of sponsorship. Here s the feedback I received from the team who implemented it:
     
    The mappings we re doing right now could probably be adequately conveyed by making the source of the has relationship an ipv4-addr SCO and using a grouping object for the higher level logical structure
    when needed. That doesn t necessarily convey the same meaning though.
    A downside for consumers is that the infrastructure object may often be just another object that has to be processed to get the actual meaning that is required (often simply the vulnerability IP/domain
    mapping)
     
    Justin Stewart
    Software Engineer

    lookingglasscyber.com
    This electronic message transmission contains information from LookingGlass Cyber Solutions, Inc. which may be attorney-client privileged,
    proprietary and/or confidential. The information in this message is intended only for use by the individual(s) to whom it is addressed.  If you believe that you have received this message in error, please contact the sender, delete this message, and be aware
    that any review, use, disclosure, copying or distribution of the contents contained within is strictly prohibited.