From 94ec6b6bfa06e2413d909b6dfbbede72707e39b8 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 25 Jun 2019 12:38:47 +0200 Subject: [PATCH] chg: [all] Sami request to have "numerical values" for the decaying indicators project --- MANIFEST.json | 8 +-- economical-impact/machinetag.json | 56 ++++++++++++------- estimative-language/machinetag.json | 11 ++-- .../machinetag.json | 17 ++++-- 4 files changed, 59 insertions(+), 33 deletions(-) diff --git a/MANIFEST.json b/MANIFEST.json index 6a652f1..067f298 100644 --- a/MANIFEST.json +++ b/MANIFEST.json @@ -191,7 +191,7 @@ "description": "Malware classification based on a SANS whitepaper about malware." }, { - "version": 5, + "version": 9, "name": "misp", "description": "Internal MISP taxonomy." }, @@ -271,7 +271,7 @@ "description": "Vocabulary for Event Recording and Incident Sharing (VERIS)." }, { - "version": 1, + "version": 2, "name": "vocabulaire-des-probabilites-estimatives", "description": "Vocabulaire des probabilités estimatives" }, @@ -311,7 +311,7 @@ "description": "Sectors and sub sectors as identified by the NIS Directive." }, { - "version": 2, + "version": 3, "name": "economical-impact", "description": "Economical impact is a taxonomy to describe the financial impact as positive or negative gain to the tagged information." }, @@ -475,5 +475,5 @@ "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/master/", "description": "Manifest file of MISP taxonomies available.", "license": "CC-0", - "version": "20190621" + "version": "20190625" } diff --git a/economical-impact/machinetag.json b/economical-impact/machinetag.json index 2150dc8..3acbc1f 100644 --- a/economical-impact/machinetag.json +++ b/economical-impact/machinetag.json @@ -2,7 +2,7 @@ "namespace": "economical-impact", "expanded": " Economical Impact", "description": "Economical impact is a taxonomy to describe the financial impact as positive or negative gain to the tagged information (e.g. data exfiltration loss, a positive gain for an adversary).", - "version": 2, + "version": 3, "refs": [ "https://www.misp-project.org/" ], @@ -12,39 +12,48 @@ "entry": [ { "value": "none", - "expanded": "No loss" + "expanded": "No loss", + "numerical_value": 0 }, { "value": "less-than-25k-eur", - "expanded": "Less than 25K EUR" + "expanded": "Less than 25K EUR", + "numerical_value": 10 }, { "value": "less-than-50k-euro", - "expanded": "Less than 50K EUR" + "expanded": "Less than 50K EUR", + "numerical_value": 20 }, { "value": "less-than-100k-euro", - "expanded": "Less than 100K EUR" + "expanded": "Less than 100K EUR", + "numerical_value": 30 }, { "value": "less-than-1M-euro", - "expanded": "Less than 1 million EUR" + "expanded": "Less than 1 million EUR", + "numerical_value": 40 }, { "value": "less-than-10M-euro", - "expanded": "Less than 10 million EUR" + "expanded": "Less than 10 million EUR", + "numerical_value": 50 }, { "value": "less-than-100M-euro", - "expanded": "Less than 100 million EUR" + "expanded": "Less than 100 million EUR", + "numerical_value": 60 }, { "value": "less-than-1B-euro", - "expanded": "Less than 1 billion EUR" + "expanded": "Less than 1 billion EUR", + "numerical_value": 70 }, { "value": "more-than-1B-euro", - "expanded": "More than 1 billion EUR" + "expanded": "More than 1 billion EUR", + "numerical_value": 80 } ] }, @@ -53,39 +62,48 @@ "entry": [ { "value": "none", - "expanded": "No gain" + "expanded": "No gain", + "numerical_value": 0 }, { "value": "less-than-25k-eur", - "expanded": "Less than 25K EUR" + "expanded": "Less than 25K EUR", + "numerical_value": 10 }, { "value": "less-than-50k-euro", - "expanded": "Less than 50K EUR" + "expanded": "Less than 50K EUR", + "numerical_value": 20 }, { "value": "less-than-100k-euro", - "expanded": "Less than 100K EUR" + "expanded": "Less than 100K EUR", + "numerical_value": 30 }, { "value": "less-than-1M-euro", - "expanded": "Less than 1 million EUR" + "expanded": "Less than 1 million EUR", + "numerical_value": 40 }, { "value": "less-than-10M-euro", - "expanded": "Less than 10 million EUR" + "expanded": "Less than 10 million EUR", + "numerical_value": 50 }, { "value": "less-than-100M-euro", - "expanded": "Less than 100 million EUR" + "expanded": "Less than 100 million EUR", + "numerical_value": 60 }, { "value": "less-than-1B-euro", - "expanded": "Less than 1 billion EUR" + "expanded": "Less than 1 billion EUR", + "numerical_value": 70 }, { "value": "more-than-1B-euro", - "expanded": "More than 1 billion EUR" + "expanded": "More than 1 billion EUR", + "numerical_value": 80 } ] } diff --git a/estimative-language/machinetag.json b/estimative-language/machinetag.json index 16445ac..8a65673 100644 --- a/estimative-language/machinetag.json +++ b/estimative-language/machinetag.json @@ -2,7 +2,7 @@ "namespace": "estimative-language", "expanded": "Estimative languages", "description": "Estimative language to describe quality and credibility of underlying sources, data, and methodologies based Intelligence Community Directive 203 (ICD 203) and JP 2-0, Joint Intelligence", - "version": 3, + "version": 4, "predicates": [ { "value": "likelihood-probability", @@ -62,17 +62,20 @@ { "value": "low", "expanded": "Low", - "description": "Uncorroborated information from good or marginal sources. Many assumptions. Mostly weak logical inferences, minimal methods application. Glaring intelligence gaps exist. Terms or expressions used: 'Possible', 'Could, may, might', 'Cannot judge, unclear.'" + "description": "Uncorroborated information from good or marginal sources. Many assumptions. Mostly weak logical inferences, minimal methods application. Glaring intelligence gaps exist. Terms or expressions used: 'Possible', 'Could, may, might', 'Cannot judge, unclear.'", + "numerical_value": 0 }, { "value": "moderate", "expanded": "Moderate", - "description": "Partially corroborated information from good sources. Several assumptions. Mix of strong and weak inferences and methods. Minimum intelligence gaps exist. Terms or expressions used: 'Likely, unlikely', 'Probable, improbable' 'Anticipate, appear'." + "description": "Partially corroborated information from good sources. Several assumptions. Mix of strong and weak inferences and methods. Minimum intelligence gaps exist. Terms or expressions used: 'Likely, unlikely', 'Probable, improbable' 'Anticipate, appear'.", + "numerical_value": 55 }, { "value": "high", "expanded": "High", - "description": "Well-corroborated information from proven sources. Minimal assumptions. Strong logical inferences and methods. No or minor intelligence gaps exist. Terms or expressions used: 'Will, will not', 'Almost certainly, remote', 'Highly likely, highly unlikely', 'Expect, assert, affirm'." + "description": "Well-corroborated information from proven sources. Minimal assumptions. Strong logical inferences and methods. No or minor intelligence gaps exist. Terms or expressions used: 'Will, will not', 'Almost certainly, remote', 'Highly likely, highly unlikely', 'Expect, assert, affirm'.", + "numerical_value": 95 } ] } diff --git a/vocabulaire-des-probabilites-estimatives/machinetag.json b/vocabulaire-des-probabilites-estimatives/machinetag.json index 81b4e03..87086b9 100644 --- a/vocabulaire-des-probabilites-estimatives/machinetag.json +++ b/vocabulaire-des-probabilites-estimatives/machinetag.json @@ -4,23 +4,28 @@ "entry": [ { "expanded": "Presque aucune chance - Quasi impossible Presque impossible Minces chances Très douteux Très peu probable Très improbable Improbable Peu de chances - 7 % (marge d’erreur d’environ 5 %)", - "value": "presque-aucune-chance" + "value": "presque-aucune-chance", + "numerical_value": 7 }, { "expanded": "Probablement pas - Invraisemblable Peu probable - 30 % (marge d’erreur d’environ 10 %)", - "value": "probablement-pas" + "value": "probablement-pas", + "numerical_value": 30 }, { "expanded": "Chances à peu près égales - une chance sur deux - 50% (marge d’erreur d’environ 10 %)", - "value": "chances-à-peu-près-egales" + "value": "chances-à-peu-près-egales", + "numerical_value": 50 }, { "expanded": "Probable - Vraisemblable Probable - 75 % (marge d’erreur d’environ 12 %)", - "value": "probable" + "value": "probable", + "numerical_value": 75 }, { "expanded": "Quasi certaine - Certain Presque certain Très probable - 93% (marge d’erreur d’environ 6 %)", - "value": "quasi-certaine" + "value": "quasi-certaine", + "numerical_value": 93 } ], "predicate": "degré-de-probabilité" @@ -33,7 +38,7 @@ "value": "degré-de-probabilité" } ], - "version": 1, + "version": 2, "description": "Ce vocabulaire attribue des valeurs en pourcentage à certains énoncés de probabilité", "expanded": "Vocabulaire des probabilités estimatives", "namespace": "vocabulaire-des-probabilites-estimatives",