[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] Proposal - Top Level Relationship Object
Resending this because I think it originally got bounced due to me being an Observer. I think John and I are largely in agreement, BTW.
From my perspective, most relationships are unidirectional, so it’s easier to think of them in terms of a directed graph (i.e., source->target). Therefore, I’d say we’d need:
Regards,
Ivan
From: <cti-stix@lists.oasis-open.org> on behalf of John Wunder
Date: Tuesday, July 28, 2015 at 4:15 PM To: Bret Jordan Cc: JG on CTI-TC, Chris O'Brien, "cti-stix@lists.oasis-open.org" Subject: Re: [cti-stix] Proposal - Top Level Relationship Object Sure...personally I would do this, which is almost identical to what we do now (other than being at the top level rather than within an object):
Relationship
ID (for the relationship) [required]
From IDREF [required]
To IDREF [required]
Relationship Qualifier [required]
Confidence [optional]
I'm undecided on whether information source information belongs in the STIX data model at all. By virtue of being in the data model it means someone is asserting it so it's impossible to verify. Digital signatures or something else out of the data model
(relying on TAXII, etc.) seem like a better approach to me. But I don't have strong opinions on this and if we do include information source in the data model I would add that here.
John
From: "Jordan, Bret"
Date: Tuesday, July 28, 2015 at 4:05 PM To: "Wunder, John A." Cc: JG on CTI-TC, Chris O'Brien, "cti-stix@lists.oasis-open.org" Subject: Re: [cti-stix] Proposal - Top Level Relationship Object
Great... Now we are discussing it... Please spell out what that would look like.
Thanks,
Bret
Bret Jordan CISSP
Director of Security Architecture and Standards | Office of the CTO
Blue Coat Systems
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]