Common Types - Datatypes RFC7012 IPFIX

[Jerome Athias <athiasjerome@gmail.com>]

Regarding STIX 2.0-CORE
7. Common Types

I suggest for
"number Contains a number."

to review/use the ones that are defined Section 3.1. Abstract Data
Types in RFC7012 "Information Model for IP Flow Information Export
(IPFIX)"

https://www.rfc-editor.org/rfc/rfc7012.txt

(the potential changes/enhancements would have to be replicated in CybOX)



On Wed, Jul 20, 2016 at 4:28 PM, Trey Darley <trey@kingfisherops.com> wrote:
> On 20.07.2016 13:26:39, Jerome Athias wrote:
>>
>> I can't remember where the Datatypes or Data Types are, but in case
>> it could help
>> https://datatracker.ietf.org/doc/rfc7012/?include_text=1
>>
>
> Hey, Jerome -
>
> The CybOX object property data types are defined here [0]. Appreciate
> the link to the IPFIX RFC. For CybOX, wherever possible we've
> duplicated the STIX data type definitions, since keeping things
> consistent across both specs makes implementer's lives easier. CybOX
> also defines a number of additional data types not used in STIX.
>
> Feel free to make suggestions in the CybOX Core spec but given the
> short time remaining before we publish the drafts and the amount of
> work that's gone into getting things to their present state, we'd need
> a really compelling argument in order to justify significant changes
> in the CybOX data type definitions.
>
> [0]: https://docs.google.com/document/d/1PSGv6Uvo3YyrK354cH0cvdn7gGedbhYJkgNVzwW9E6A/edit#heading=h.fbffi5fz6dkd
>
> --
> Cheers,
> Trey
> ++--------------------------------------------------------------------------++
> Kingfisher Operations, sprl
> gpg fingerprint: 85F3 5F54 4A2A B4CD 33C4  5B9B B30D DD6E 62C8 6C1D
> ++--------------------------------------------------------------------------++
> --
> "There are only two hard things in Computer Science: cache
> invalidation and naming things." --Phil Karlton