cybox.mitre.org

maecproject.github.io

AnalysisType | MAEC Project Documentation

http://maecproject.github.io/data-model/4.1/maecPackage/AnalysisType

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. AnalysisType MAEC Package Schema. Provides a way of capturing the information associated with the analysis of a malware instance, such as the subject, authors, start datetime, and other relevant data. The required id field specifies a unique ID for this Analysis. The type field specifies the type of malware analysis being performed. The method field specifies the analysis method used in the analysis. The Co...

seguridad-de-la-informacion.blogspot.com

Ciberseguridad: elegir entre la pastilla roja o la pastilla azul | Apuntes de seguridad de la información

http://seguridad-de-la-informacion.blogspot.com/2015/04/ciberseguridad-elegir-entre-la-pastilla.html

Apuntes de seguridad de la información. Blog personal de Javier Cao Avellaneda. Viernes, 24 de abril de 2015. Ciberseguridad: elegir entre la pastilla roja o la pastilla azul. Un blog de 12 años de antigüedad que ha ido recogiendo los diferentes incidentes y reflexionando sobre ellos ahora permite viajar al pasado para comprobar que los grandes fuegos actuales en esta materia empezaron no atajando a tiempo las pequeñas cerillas que se iban dejando caer por el monte. 191;Está el hacking de moda? Yo entré ...

maecproject.github.io

Documentation | MAEC Project Documentation

http://maecproject.github.io/documentation

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. This document provides a detailed introduction to the Malware Attribute Enumeration and Characterization (MAEC ) Language, an overview of the MAEC data models, a discussion of high-level use cases, requirements for the MAEC Language, and a discussion of open issues and challenges. Specification documents are available for the MAEC data models. Utilities and Developer Resources. Various utilities and other d...

thelowedown.wordpress.com

Cyber Attack Models: Part 2 | The Lowe Down

https://thelowedown.wordpress.com/2015/07/21/cyber-attack-models-part-2

Just another I.T. worldview! July 21, 2015. Cyber Attack Models: Part 2. Posted by Robert under I.T. Measurable events, such as a registry key or a file being created, a DNS query or an HTTP GET request being received, or an IDS rule firing; or,. A stateful property, such as a hash value of a file, a specific registry key value, or a regular expression match. The authors of the seminal paper on the Cyber Kill Chain described types of indicators:. What are common indicators? Here is one view. That lists t...

maecproject.github.io

Authoring Tutorial | MAEC Project Documentation

http://maecproject.github.io/getting-started/authoring-tutorial

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. This authoring tutorial will walk you through how to create a simple MAEC Package.

maecproject.github.io

BehaviorType | MAEC Project Documentation

http://maecproject.github.io/data-model/4.1/maecBundle/BehaviorType

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. BehaviorType MAEC Bundle Schema. The required id field specifies a unique ID for this Behavior. The ordinal position field specifies the ordinal position of the Behavior with respect to the execution of the malware. The status field specifies the execution status of the Behavior being characterized. The Description field specifies a prose textual description of the Behavior. Discovery Method 0.1.

cyber-intel.net

Cyber-Intel.net - Home

https://www.cyber-intel.net/index.html

This site is meant to act as a helpful directory of various cyber security news and threat intelligence sources that can be found around the Internet. This site is not meant to endorse any one vendor or source. This is a work in progress that began in February 2013, so check in occasionally for new links/content. Questions/concerns/suggestions/link removal requests can be sent to gonephishin64 [at] gmail.com. US Public-Private Sector Cyber Information Sharing. Https:/ www.infragard.net. Adobe Product Sec...

maecproject.github.io

Sample Walkthrough | MAEC Project Documentation

http://maecproject.github.io/getting-started/sample-walkthrough

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. This walkthrough will look at a simple MAEC document and look through it piece by piece to help describe basic MAEC concepts. Specifically, we’ll look at a watchlist for IP addresses to see how MAEC can be used to describe indicators of malicious activity. Page and reading through the whitepaper and other materials linked from there.

msm.mitre.org

Making Security Measurable- Intrusion Detection

http://msm.mitre.org/directory/areas/intrusiondetection.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. The narrative text description for this page is currently under development. Please check back later. In the meantime, standardization efforts in this area of cyber security include the following:. Common Vulnerabilities and Exposures (CVE). Common Vulnerability Scoring System (CVSS). Common Attack Pattern Enumeration and Classification (CAPEC). Cyber Observable Expression (CybOX).