Re: [cti-cybox] Update on the CybOX 3.0 effort

[Trey Darley <trey@kingfisherops.com>]

On 20.07.2016 13:26:39, Jerome Athias wrote:
> 
> I can't remember where the Datatypes or Data Types are, but in case
> it could help
> https://datatracker.ietf.org/doc/rfc7012/?include_text=1
> 

Hey, Jerome -

The CybOX object property data types are defined here [0]. Appreciate
the link to the IPFIX RFC. For CybOX, wherever possible we've
duplicated the STIX data type definitions, since keeping things
consistent across both specs makes implementer's lives easier. CybOX
also defines a number of additional data types not used in STIX.

Feel free to make suggestions in the CybOX Core spec but given the
short time remaining before we publish the drafts and the amount of
work that's gone into getting things to their present state, we'd need
a really compelling argument in order to justify significant changes
in the CybOX data type definitions.

[0]: https://docs.google.com/document/d/1PSGv6Uvo3YyrK354cH0cvdn7gGedbhYJkgNVzwW9E6A/edit#heading=h.fbffi5fz6dkd

-- 
Cheers,
Trey
++--------------------------------------------------------------------------++
Kingfisher Operations, sprl
gpg fingerprint: 85F3 5F54 4A2A B4CD 33C4  5B9B B30D DD6E 62C8 6C1D
++--------------------------------------------------------------------------++
--
"There are only two hard things in Computer Science: cache
invalidation and naming things." --Phil Karlton

Attachment: signature.asc
Description: Digital signature