There appears to be no schema changes in the CAPEC 2.9 as its still at 2.7.1 which is good news for those that support STIX 1.*
Paul Patrick
From:
<cti-stix@lists.oasis-open.org> on behalf of "Wunder, John A." <jwunder@mitre.org>
Date: Wednesday, January 11, 2017 at 8:10 AM
To: Terry MacDonald <terry.macdonald@cosive.com>, "cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org>, "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: Re: [cti-stix] Fwd: CAPEC Version 2.9 is Released
Not for STIX 2.0, no. Our current structure is just a reference to a CAPEC ID as an external reference, which doesn’t change with this update.
STIX 1.2.1 does have a direct embed of the CAPEC schema via an extension, but I’m assuming people are not interested in going back to update that.
Good question though, thanks for bringing this up!
John
From:
<cti-stix@lists.oasis-open.org> on behalf of Terry MacDonald <terry.macdonald@cosive.com>
Date: Tuesday, January 10, 2017 at 9:28 PM
To: "cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org>, "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: [cti-stix] Fwd: CAPEC Version 2.9 is Released
Do we need to update the attack-pattern object to cope with the update of CAPEC to this new version?
Terry MacDonald | Chief Product Officer
---------- Forwarded message ----------
From: Buttner, Drew <abuttner@mitre.org>
Date: 11 January 2017 at 13:47
Subject: CAPEC Version 2.9 is Released
To: capec-research-list CAPEC Researcher Discussion <capec-research-list@lists.mitre.org>
All,
After a few months of effort, and some great insight from the community, we have posted a new version of the CAPEC List. (version 2.9) The focus of this version was the restructure of the Mechanisms of Attack view based on the feedback we received. Thank you
to all those that contributed ideas.
http://capec.mitre.org/data/definitions/1000.html
In addition, we added a couple of new CAPECs around Traffic Injection that were submitted by a community member.
http://capec.mitre.org/data/definitions/594.html
Finally, we put a lot of effort into simplifying the relationship structures throughout. Our hope is that the list is easier to navigate, easier to follow, and more useful to all. Part of this also involved completely redesigning the CAPEC List page. We hope
you find this an improvement.
http://capec.mitre.org/data/index.html
We are by no means finished. There are still a few areas of the hierarchy that are inconsistent and we will continue our effort to address these. We will also be attempting to add a MindMap in the near future to help everyone better visualize the hierarchy.
In the coming weeks, we will be reaching back out to the community to help us identify gaps in the CAPEC List that need to filled, as well as help in completing items that are currently underspecified. More to come on this.
Thank you again for all of your help,
Drew
---------
Andrew Buttner
The MITRE Corporation
abuttner@mitre.org
781-271-3515
To unsubscribe, send an email message to
LISTSERV@LISTS.MITRE.ORG with SIGNOFF CAPEC-RESEARCH-LIST in the BODY of the message. If you have difficulties, write to
CAPEC-RESEARCH-LIST-REQUEST@LISTS.MITRE.ORG.
This email and any attachments thereto may contain private, confidential, and/or privileged material for the sole use of the intended recipient. Any review, copying, or distribution of this email (or any attachments thereto) by others is strictly prohibited.
If you are not the intended recipient, please contact the sender immediately and permanently delete the original and any copies of this email and any attachments thereto.
|