MISP/ROADMAP.md

2.5 KiB

MISP Project roadmap

The MISP Project roadmap is mostly based on the user communities (e.g. private communities, CSIRTs communities, security researchers, ISACs (Information Sharing and Analysis Centers), security providers, governmental or military organisations) relying on MISP to perform their duties of information sharing and analysis. The features in the MISP project are built from practical use-cases in information security, intelligence communities, incident response teams and fraud analysis groups.

These groups provide their input via the different methods such as GitHub/Gitter issues, user groups, and discussions from MISP Summit and MISP trainings. Some groups are actively taking part in developing the MISP project whilst many others contribute by providing bug reports, feature requests or proposals to enhance the project. As the various communities have common goals, the MISP core team maintains the list of features and prioritises the implementation based on the impact and usefulness in the different groups and communities.

We track enhancements and feature requests on GitHub, and tend to use the number of comments on feature request to prioritize the features that the community needs. If there's a feature you want to see in MISP, feel free to create a feature request or leave a comment on an existing related issue (if it exists). Better still, you can implement the feature yourself.

We do not do long term roadmaps on purpose. The problem of really long-term specific roadmaps is that people might end up expecting in something that turns out to be not really relevant for the community at large and is just posponed forever. Our priorities change frequently depending on:

  • What threat of the month we are facing
  • What small issue turns into an maintainable disaster
  • What we fast track based on larger communities asking for it or paid developer support

That being said, we have a few general goals that we are currently working towards:

  • Focusing on analyst tooling
  • Reworking the software stack
  • Improving usability
  • Additional interconnections