[mile] IODEF predicate logic
"Panos Kampanakis (pkampana)" <pkampana@cisco.com> Mon, 15 July 2013 20:02 UTC
Return-Path: <pkampana@cisco.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C947221E814F for <mile@ietfa.amsl.com>; Mon, 15 Jul 2013 13:02:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level:
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9mQ4p2ogvJ8K for <mile@ietfa.amsl.com>; Mon, 15 Jul 2013 13:02:43 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) by ietfa.amsl.com (Postfix) with ESMTP id 3032321E811E for <mile@ietf.org>; Mon, 15 Jul 2013 13:02:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3884; q=dns/txt; s=iport; t=1373918544; x=1375128144; h=from:to:subject:date:message-id:mime-version; bh=IPm830SUVbExKrwrQWB9ZXo8YOhF5KXIo1GBBDxnE9U=; b=bcudlT0GvPs0/GQV2+H5BUnJ2wmAgW/8RMzVsvLW2Rn1fUNlrifbpDft sypI1meDTVgoRAtSUzKn9/hxLzBjy2Rtfa2dVKiVG93tT2pA0a+GBImpc f3Gku1WPSfiTOELBsD2BHOILH/K0+UpKGjHT6dMy+O/Be9GdqtSgW0suA s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AlgFAHJU5FGtJXG+/2dsb2JhbABagkJENE+5H4g9gRMWdIIlAQQtXgEMHlYmAQQbiAgMlUygQo8zg0NtA5kFkCSDEoIo
X-IronPort-AV: E=Sophos; i="4.89,671,1367971200"; d="scan'208,217"; a="235130812"
Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-3.cisco.com with ESMTP; 15 Jul 2013 20:02:22 +0000
Received: from xhc-aln-x04.cisco.com (xhc-aln-x04.cisco.com [173.36.12.78]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id r6FK2LMk012683 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <mile@ietf.org>; Mon, 15 Jul 2013 20:02:21 GMT
Received: from xmb-rcd-x10.cisco.com ([169.254.15.56]) by xhc-aln-x04.cisco.com ([173.36.12.78]) with mapi id 14.02.0318.004; Mon, 15 Jul 2013 15:02:21 -0500
From: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
To: "mile@ietf.org" <mile@ietf.org>
Thread-Topic: IODEF predicate logic
Thread-Index: Ac6BljICQSOPLvR4RuCRb/L6J7DnMg==
Date: Mon, 15 Jul 2013 20:02:20 +0000
Message-ID: <1C9F17D1873AFA47A969C4DD98F98A753E59AE@xmb-rcd-x10.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [64.102.89.102]
Content-Type: multipart/alternative; boundary="_000_1C9F17D1873AFA47A969C4DD98F98A753E59AExmbrcdx10ciscocom_"
MIME-Version: 1.0
Subject: [mile] IODEF predicate logic
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mile>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 20:02:48 -0000
Hello everyone, In the past people have asked how IODEF can combine multiple indicators in one IODEF definition. For example a question can be, if there are more than two malicious addresses, how they can be added in one definition and what is the logic behind how they are combined? draft-ietf-mile-rfc5070-bis-00 introduces some watchlist fields that allow for multiple indicators on one folder. In draft-ietf-mile-iodef-guidance-01<http://tools.ietf.org/html/draft-ietf-mile-iodef-guidance-01> I have added section http://tools.ietf.org/html/draft-ietf-mile-iodef-guidance-01#section-4.4 that describes how the predicate logic works. Comments and thoughts are welcome. Rgs, Panos
- [mile] IODEF predicate logic Panos Kampanakis (pkampana)
- Re: [mile] IODEF predicate logic Roman D. Danyliw
- Re: [mile] IODEF predicate logic Panos Kampanakis (pkampana)
- Re: [mile] IODEF predicate logic Panos Kampanakis (pkampana)
- Re: [mile] IODEF predicate logic Roman D. Danyliw
- Re: [mile] IODEF predicate logic Panos Kampanakis (pkampana)
- Re: [mile] IODEF predicate logic Moriarty, Kathleen
- Re: [mile] IODEF predicate logic Panos Kampanakis (pkampana)