From ec73ce3ad4c75d4ca628394cb51cee89e68809d8 Mon Sep 17 00:00:00 2001 From: Hannah Ward Date: Wed, 5 Apr 2017 12:00:00 +0100 Subject: [PATCH 1/3] new: Added basic binary file taxonomy. Fixes #59 --- binary-class/README.md | 25 +++++++++++++++++++++++++ binary-class/machinetag.json | 30 ++++++++++++++++++++++++++++++ 2 files changed, 55 insertions(+) create mode 100644 binary-class/README.md create mode 100644 binary-class/machinetag.json diff --git a/binary-class/README.md b/binary-class/README.md new file mode 100644 index 0000000..cb2b59d --- /dev/null +++ b/binary-class/README.md @@ -0,0 +1,25 @@ +# Binary Classification + +Custom taxonomy for tagging of known binary files + +## type + +
+
good
+
Known good/safe
+
bad
+
Known bad/malicious
+
unknown
+
Not yet known
+
+ +# Machine-parsable Binary Taxonomy + +The repository contains a [JSON file including the machine-parsable tags](machinetag.json) +along with their human-readable description. The software can use both +representation on the user-interface and store the tag as machine-parsable. + +~~~~ +binary-class:type="good" +~~~~ + diff --git a/binary-class/machinetag.json b/binary-class/machinetag.json new file mode 100644 index 0000000..31a38e1 --- /dev/null +++ b/binary-class/machinetag.json @@ -0,0 +1,30 @@ +{ + "namespace": "binary-class", + "description": "Custom taxonomy for types of binary file.", + "version": 1, + "predicates": [ + { + "value": "type", + "expanded": "Binary Type" + } + ], + "values": [ + { + "predicate": "type", + "entry": [ + { + "value": "good", + "expanded": "Known Good/Safe" + }, + { + "value": "malicious", + "expanded": "Known Bad/Malicious" + }, + { + "value": "unknown", + "expanded": "Not yet known" + } + ] + } + ] +} From 6ae728cc3dbcba102543cdc682a629df7d63ea4c Mon Sep 17 00:00:00 2001 From: Hannah Ward Date: Wed, 5 Apr 2017 12:08:16 +0100 Subject: [PATCH 2/3] chg: Added binary-class to README --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index f9d40e6..1253247 100644 --- a/README.md +++ b/README.md @@ -41,6 +41,7 @@ The following taxonomies are described: - [TLP - Traffic Light Protocol](./tlp) - [Vocabulaire des probabilités estimatives](./vocabulaire-des-probabilites-estimatives) - Vocabulary for Event Recording and Incident Sharing [VERIS](./veris) +- [Binary Classificaetion](./binary-class) safe/malicious binary tagging ### [Admiralty Scale](./admiralty-scale) From 311f30487cd4d42bac93fb6c0e452a2a8423111a Mon Sep 17 00:00:00 2001 From: Hannah Ward Date: Wed, 5 Apr 2017 12:09:51 +0100 Subject: [PATCH 3/3] fix: Typo in readme --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 1253247..71909fa 100644 --- a/README.md +++ b/README.md @@ -41,7 +41,7 @@ The following taxonomies are described: - [TLP - Traffic Light Protocol](./tlp) - [Vocabulaire des probabilités estimatives](./vocabulaire-des-probabilites-estimatives) - Vocabulary for Event Recording and Incident Sharing [VERIS](./veris) -- [Binary Classificaetion](./binary-class) safe/malicious binary tagging +- [Binary Classification](./binary-class) safe/malicious binary tagging ### [Admiralty Scale](./admiralty-scale)