Subject: [sacm] New Version Notification for draft-paine-smart-indicators-of-compromise-00.txt

From: Kirsty P <[email-masked]>
Date: Fri, 6 Mar 2020 13:30:50 +0000

MILE and SACM,

Please see below for details of my new draft on Indicators of Compromise (IoCs) - it was suggested to me that the topic may be of interest to you. I welcome your comments, discussion or feedback on this draft - please do get in touch.

Kirsty

A new version of I-D, draft-paine-smart-indicators-of-compromise-00.txt
has been successfully submitted by Kirsty Paine and posted to the
IETF repository.

Name:           draft-paine-smart-indicators-of-compromise
Revision:       00
Title:          Indicators of Compromise (IoCs) and Their Role in Attack Defence
Document date:  2020-03-06
Group:          Individual Submission
Pages:          15
URL:            https://www.ietf.org/id/draft-paine-smart-indicators-of-compromise-00.txt
Status:         https://datatracker.ietf.org/doc/draft-paine-smart-indicators-of-compromise/
Htmlized:       https://tools.ietf.org/html/draft-paine-smart-indicators-of-compromise-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-paine-smart-indicators-of-compromise

Abstract:
   Indicators of Compromise (IoCs) are an important technique in attack
   defence (often called cyber defence).  This document outlines the
   different types of IoC, their associated benefits and limitations,
   and discusses their effective use.  It also contextualises the role
   of IoCs in defending against attacks through describing a recent case
   study.  This draft does not pre-suppose where IoCs can be found or
   should be detected - as they can be discovered and deployed in
   networks, endpoints or elsewhere - rather, engineers should be aware
   that they need to be detectable (either by endpoint security
   appliances or network-based defences, or ideally both) to be
   effective.

This information is exempt under the Freedom of Information Act 2000 (FOIA) and may be exempt under other UK information legislation. Refer any FOIA queries to [email-masked]. All material is UK Crown Copyright ©