Template / starter document request for OpenC2 Actuator Profile for Intrusion Detection Systems

Submitted on Thursday, May 28, 2020 - 18:51
Submitted by user:
Submitted values are:

Your name: David Lemire
TC name: Open Command and Control (OpenC2)
TC email address: openc2@lists.oasis-open.org
Work product title and version number: OpenC2 Actuator Profile for Intrusion
Detection Systems
Work product abbreviation: ap-ids
Track: Standards Track Work Product
Abstract: Open Command and Control (OpenC2) is a concise and extensible
language
to enable the command and control of cyber defense components, subsystems
and/or
systems in a manner that is agnostic of the underlying products,
technologies,
transport mechanisms or other aspects of the implementation. An Intrusion
Detection System (IDS) is a security function for real-time traffic
monitoring
and inspection for detecting patterns of misuse in network traffic. This
OpenC2
Actuator Profile defines the Actions, Targets, Specifiers and Options that
are
consistent with the version 1.0 of the OpenC2 Language Specification
(OpenC2-Lang-v1.0) in the context of command and control of IDS
functionality.
Format: Please describe in Notes section
Chair(s):
Joe Brule, jmbrule@radium.ncsc.mil, National Security Agency
Duncan Sparrell, duncan@sfractal.com,sFractal Consulting
Editor(s): Duncan Sparrell, duncan@sfractal.com,sFractal Consulting
Namespace(s):
Notes: Please supply the starter document in GitHub flavored markdown, as is
the
OpenC2 TC's norm. A separate ticket will be submitted to create a repository
for
this document.

The results of this submission may be viewed at:
http://tools.oasis-open.org/issues/browse/TCADMIN