STIX 2.0 Status Update

["Wunder, John A." <jwunder@mitre.org>]

All,

 

Here’s a quick status update on where we stand with STIX. Keep in mind that http://stixproject.github.io/stix2.0/ is still your landing page for currently active topics.

 

I know that I mentioned motions on some of these topics soon, got caught up in some travel and other work so I wasn’t able to make them. I believe:

 

-          Report, Kill Chain, External IDs, and Campaign are ready for motions. I’ll make the motion either today or tomorrow.

-          Vocab topics will be ready as soon as we update them to remove the normative statements on string length

-          Attack pattern should be good as well, though I’d like to confirm on the working call tomorrow

-          I need to talk to Gary but at some point we need to decide when intrusion set is ready

 

Thanks to Alex Tweed at MITRE for putting this list together. I’ll have a broader status update during and after the call tomorrow, including areas where we need people to focus some time/energy.

 

John

 

Done
Object Level Markings	Ballot Pending	Object Level Markings Section
String Length Normative Text	Ballot Closed – Changes in Progress	Online Ballot
Bundle	Accepted	Bundle Section
Indicator Type Vocab	Accepted	Indicator Label Section
Versioning	Accepted	Versioning Section
Need Review
Open Vocabulary	Editorial Work	Open Vocabulary Section
Controlled Vocabulary	Editorial Work	Controlled Vocabulary Section
Vocab Ext	Editorial Work	Vocabulary Extension Section
Report	Final Review	Report Section
Kill Chain	Final Review	Kill Chain Section
External Reference	Final Review	External Reference Section
Attack Pattern	Final Review	Attack Pattern Section
Campaign	Final Review	Campaign Section
Nearing Complete
Malware	Minor Work	Malware Section
In Progress
Intrusion Set	Minor Work	Intrusion Set Section
Infrastructure	Minor Work	Infrastructure Section
Internationalization	Major Work
Granular Markings	Major Work	Granular Markings Section
Indicator	Minor Work	Indicator Section
Asset	Major Work	Asset Section
Incident	Major Work	Incident Section
Tool	Major Work	TBD
Started, Not Finished, No Current Work
Custom Object	Minor Work	Custom Top Level Objects Section
Observation	Minor Work	Observation Section
Sighting	Minor Work	Sighting Section
CybOX Container	Minor Work	CybOX Container Section
Not Started
Identity	Major Work	Identity Section
Target	Major Work	Exploit Target Section
Threat Actor	Major Work	Threat Actor Section
COA	Major Work	Course of Action Section
Vulnerability	Minor Work	Vulnerability Section
Configuration	Minor Work	Configuration Section
Weakness	Minor Work	Weakness Section
Marking Definition	Major Work	Marking Definition Section
Finishing Up
Relationship Validation	Major Work