Re: Formalizing Consensus - CybOX

["Kirillov, Ivan A." <ikirillov@mitre.org>]

Apologies for the list formatting below. Hopefully this works better:

• Content coming into the document starts as a Concept
• Once the community begins to work on the topic it will move to the Development phase. During this phase, the group will flesh out the design and come up with normative text.  
• As the group comes to general consensus it will move to a Review phase. As co-chairs, we will send a note to the list stating that a topic is ready for formal review. Any comments received during this phase will be discussed via email or during the Thursday CybOX working session.
• A topic will move into its final Draft phase, based on the views of the co-chairs on having formal consensus, to include receiving no comments/objections. If this cannot be established, a formal motion for a ballot will be made on the email list; however, we’d like to avoid this if at all possible due to the large number of CybOX entities. Draft status doesn’t mean that the text cannot change. Editorial changes can be made throughout the process without going back to earlier phases, however, if material changes are needed, the topic under review would move back to the Development phase and start again.  

Regards,

Ivan

From: Ivan Kirillov <ikirillov@mitre.org>
Date: Wednesday, May 4, 2016 at 9:29 AM
To: "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>
Subject: Formalizing Consensus - CybOX

All,

Following in the footsteps of STIX, we’d like to move towards a more formal process of gaining consensus on CybOX entities. Thus, we’ve used the STIX status concepts as a baseline and came up with the following:

• Content coming into the document starts as a Concept
• Once the community begins to work on the topic it will move to the Development phase. During this phase, the group will flesh out the design and come up with normative text.  
• As the group comes to general consensus it will move to a Review phase. As co-chairs, we will send a note to the list stating that a topic is ready for formal review. Any comments received during this phase will be discussed via email or during the Thursday CybOX working session.
• A topic will move into its final Draft phase, based on the views of the co-chairs on having formal consensus, to include receiving no comments/objections. If this cannot be established, a formal motion for a ballot will be made on the email list; however, we’d like to avoid this if at all possible due to the large number of CybOX entities. Draft status doesn’t mean that the text cannot change. Editorial changes can be made throughout the process without going back to earlier phases, however, if material changes are needed, the topic under review would move back to the Development phase and start again.  

Based on this, we’ve gone through the CybOX 3.0 specification and marked each entity accordingly.

Accordingly, we welcome your feedback and comments on the items currently ready for Review :

Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.zi7mcrukfczf

Hashes: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.odoabbtwuxyd

NTFS File Extension: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.o6cweepfrsci

PDF File Extension: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.fyl99becfz8j

Registry Key Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.luvw8wjlfo3y

URL Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.ah3hict2dez0

Domain Name Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.prhhksbxbg87

Mutex Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.s5q2lpi4a5cs

X509 Certificate Object: https://docs.google.com/document/d/1DdS-NrVTjGJ3wvCJ7dbSlhYeiaWS6G6dOXu2F3POpUs/edit#heading=h.8abcy1o5x9w1

Regards,

Ivan