Re: [cti-cybox] Extended Properties

["Jordan, Bret" <bret.jordan@bluecoat.com>]

I have tried to stub in what this would look like in Core and even added a table header to the File Object to show what it would look like.  

Thanks,

Bret

Bret Jordan CISSP

Director of Security Architecture and Standards | Office of the CTO

Blue Coat Systems

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." 

On Aug 23, 2016, at 14:38, Kirillov, Ivan A. <ikirillov@mitre.org> wrote:

That seems reasonable – since extended_properties is indeed common to all CybOX Objects (and is the only such field besides type), aligning with STIX on this makes sense.

Regards,
Ivan

On 8/23/16, 1:38 PM, "cti-cybox@lists.oasis-open.org on behalf of Jordan, Bret" <cti-cybox@lists.oasis-open.org on behalf of bret.jordan@bluecoat.com> wrote:

From my reading this far, it appears as if the extended_properties field is a "Common Properties" field that all official CybOX Objects will need.  As such I would propose we create a section in the document like we did with STIX to capture these common properties and then show them as such on each CybOX Object.

Bret

Sent from my Commodore 64
---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail