MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

Fixed following review to match JSON schema

pull/6/head
Alexandre Dulaunoy 2017-02-13 16:38:22 +01:00
parent 70c0117a76
commit fd00754b9e
2 changed files with 40 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
misp-taxonomy-format/raw.md
View File

@ -5,7 +5,7 @@
% ipr= "trust200902" % ipr= "trust200902"
% area = "Security" % area = "Security"
% %
% date = 2016-10-16T00:00:00Z % date = 2017-02-13T00:00:00Z
% %
% [[author]] % [[author]]
% initials="A." % initials="A."
@ -83,7 +83,7 @@ to describe machine tag (aka triple tag) vocabularies.
The MISP taxonomy format uses the JSON [@!RFC4627] format. Each namespace is represented as a JSON object with meta information including the following fields: namespace, description, version. The MISP taxonomy format uses the JSON [@!RFC4627] format. Each namespace is represented as a JSON object with meta information including the following fields: namespace, description, version.
namespace defines the overall namespace of the machine tag. The namespace is represented as a string and **MUST** be present. The description is represented as a string and **SHOULD** be present. A version is represented as a decimal and **MUST** be present. namespace defines the overall namespace of the machine tag. The namespace is represented as a string and **MUST** be present. The description is represented as a string and **MUST** be present. A version is represented as a decimal and **MUST** be present.
predicates defines all the predicates available in the namespace defined. predicates is represented as an array of JSON objects. predicates **MUST** be present and **MUST** at least content one element. predicates defines all the predicates available in the namespace defined. predicates is represented as an array of JSON objects. predicates **MUST** be present and **MUST** at least content one element.
@ -91,11 +91,11 @@ values defines all the values for each predicate in the namespace defined. value
## predicates ## predicates
The predicates array contains one or more JSON objects which lists all the possible predicates. The JSON object contains two fields: value and expanded. value and expanded **MUST** be present. value is represented as a string and describes the predicate value. The predicate value **MUST** not contain spaces or colons. expanded is represented as a string and describes the human-readable version of the predicate value. The predicates array contains one or more JSON objects which lists all the possible predicates. The JSON object contains two fields: value and expanded. value **MUST** be present. expanded **SHOULD** be present. value is represented as a string and describes the predicate value. The predicate value **MUST** not contain spaces or colons. expanded is represented as a string and describes the human-readable version of the predicate value.
## values ## values
The values array contain one or more JSON objects which lists all the possible values of a predicate. The JSON object contains two fields: predicate and entry. predicate is represented as a string and describes the predicate value. entry is an array with one or more JSON objects. The JSON object contains two fields: value and expanded. value and expanded **MUST** be present. value is represented as a string and describes the machine parsable value. expanded is represented as a string and describes the human-readable version of the value. The values array contain one or more JSON objects which lists all the possible values of a predicate. The JSON object contains two fields: predicate and entry. predicate is represented as a string and describes the predicate value. entry is an array with one or more JSON objects. The JSON object contains two fields: value and expanded. value **MUST** be present. expanded **SHOULD** be present. value is represented as a string and describes the machine parsable value. expanded is represented as a string and describes the human-readable version of the value.
## optional fields ## optional fields

72
misp-taxonomy-format/raw.md.txt
View File

@ -5,7 +5,7 @@
Network Working Group A. Dulaunoy Network Working Group A. Dulaunoy
Internet-Draft A. Iklody Internet-Draft A. Iklody
Intended status: Informational CIRCL Intended status: Informational CIRCL
Expires: April 19, 2017 October 16, 2016 Expires: August 17, 2017 February 13, 2017
MISP taxonomy format MISP taxonomy format
@ -33,11 +33,11 @@ Status of This Memo
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on April 19, 2017. This Internet-Draft will expire on August 17, 2017.
Copyright Notice Copyright Notice
Copyright (c) 2016 IETF Trust and the persons identified as the Copyright (c) 2017 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
@ -53,9 +53,9 @@ Copyright Notice
Dulaunoy & Iklody Expires April 19, 2017 [Page 1] Dulaunoy & Iklody Expires August 17, 2017 [Page 1]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
Table of Contents Table of Contents
@ -109,9 +109,9 @@ Table of Contents
Dulaunoy & Iklody Expires April 19, 2017 [Page 2] Dulaunoy & Iklody Expires August 17, 2017 [Page 2]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
1.1. Conventions and Terminology 1.1. Conventions and Terminology
@ -145,7 +145,7 @@ Internet-Draft MISP taxonomy format October 2016
namespace defines the overall namespace of the machine tag. The namespace defines the overall namespace of the machine tag. The
namespace is represented as a string and MUST be present. The namespace is represented as a string and MUST be present. The
description is represented as a string and SHOULD be present. A description is represented as a string and MUST be present. A
version is represented as a decimal and MUST be present. version is represented as a decimal and MUST be present.
predicates defines all the predicates available in the namespace predicates defines all the predicates available in the namespace
@ -159,19 +159,19 @@ Internet-Draft MISP taxonomy format October 2016
The predicates array contains one or more JSON objects which lists The predicates array contains one or more JSON objects which lists
all the possible predicates. The JSON object contains two fields: all the possible predicates. The JSON object contains two fields:
value and expanded. value and expanded MUST be present. value is value and expanded. value MUST be present. expanded SHOULD be
represented as a string and describes the predicate value. The present. value is represented as a string and describes the predicate
predicate value MUST not contain spaces or colons. expanded is value. The predicate value MUST not contain spaces or colons.
Dulaunoy & Iklody Expires April 19, 2017 [Page 3] Dulaunoy & Iklody Expires August 17, 2017 [Page 3]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
represented as a string and describes the human-readable version of expanded is represented as a string and describes the human-readable
the predicate value. version of the predicate value.
2.3. values 2.3. values
@ -180,10 +180,10 @@ Internet-Draft MISP taxonomy format October 2016
predicate and entry. predicate is represented as a string and predicate and entry. predicate is represented as a string and
describes the predicate value. entry is an array with one or more describes the predicate value. entry is an array with one or more
JSON objects. The JSON object contains two fields: value and JSON objects. The JSON object contains two fields: value and
expanded. value and expanded MUST be present. value is represented as expanded. value MUST be present. expanded SHOULD be present. value is
a string and describes the machine parsable value. expanded is represented as a string and describes the machine parsable value.
represented as a string and describes the human-readable version of expanded is represented as a string and describes the human-readable
the value. version of the value.
2.4. optional fields 2.4. optional fields
@ -221,9 +221,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 4] Dulaunoy & Iklody Expires August 17, 2017 [Page 4]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
contextual information. The description at the namespace level is a contextual information. The description at the namespace level is a
@ -277,9 +277,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 5] Dulaunoy & Iklody Expires August 17, 2017 [Page 5]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
3. Directory 3. Directory
@ -333,9 +333,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 6] Dulaunoy & Iklody Expires August 17, 2017 [Page 6]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
"value": "source-reliability", "value": "source-reliability",
@ -389,9 +389,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 7] Dulaunoy & Iklody Expires August 17, 2017 [Page 7]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
}, },
@ -445,9 +445,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 8] Dulaunoy & Iklody Expires August 17, 2017 [Page 8]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
{ {
@ -501,9 +501,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 9] Dulaunoy & Iklody Expires August 17, 2017 [Page 9]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
"expanded": "75% Probable", "expanded": "75% Probable",
@ -557,9 +557,9 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 10] Dulaunoy & Iklody Expires August 17, 2017 [Page 10]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
] ]
@ -613,9 +613,9 @@ Authors' Addresses
Dulaunoy & Iklody Expires April 19, 2017 [Page 11] Dulaunoy & Iklody Expires August 17, 2017 [Page 11]
Internet-Draft MISP taxonomy format October 2016 Internet-Draft MISP taxonomy format February 2017
Andras Iklody Andras Iklody
@ -669,4 +669,4 @@ Internet-Draft MISP taxonomy format October 2016
Dulaunoy & Iklody Expires April 19, 2017 [Page 12] Dulaunoy & Iklody Expires August 17, 2017 [Page 12]