Re: [cti-interoperability] OASIS KMIP TC - Activity Alert

[Allan Thomson <athomson@lgscout.com>]

Thanks for the references Pat.

I reviewed the KMIP 1.2 Profile document. http://docs.oasis-open.org/kmip/profiles/v1.2/os/kmip-profiles-v1.2-os.pdf

One of the questions that this document raises is when the document states ‘Supports’ -> its not clear what that means if we were to map it to STIX.

For example in the KMIP document: "Supports Message Format ([KMIP-SPEC] 7)

For two systems exchanging KMIP messages does that mean they are able to support the behavior associated with the message or just that they know how to parse a message?

In other interoperability forums, I’ve seen that they focus on both message structure parsing and message behavior checks. So they describe in their interoperability tests expected behavior of the systems exchanging the messages not just support of a message parsing.

One of the key questions for interoperability is to answer what the definition of support means when applied to a STIX?

Does it mean that a system can generate a STIX package for each key object type and receive them? How will that be verified on both transmit and receive side?

Some key questions that the group needs to consider.

Allan

On Feb 24, 2016, at 8:18 AM, Patrick Maroney <Pmaroney@SPECERE.ORG> wrote:

Those in the OASIS CTI TC Interoperability Sub-Committee who are interested in studying examples of OASIS Interoperability processes should monitor the activity and documents coming out of the OASIS KMIP TC Interoperability in preparation for the RSA Conference Committee  activities.

These should all be publicly available (or you can join the TC and SC as an Observer and get direct notifications).

https://www.oasis-open.org/apps/org/workgroup/kmip/index.php

https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=kmip

Patrick Maroney
President
Integrated Networking Technologies, Inc.
Desk: (856)983-0001
Cell: (609)841-5104
Email: pmaroney@specere.org

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail