Re: [cti-users] Question on STIX 2 Interop Personas.

[Allan Thomson <athomson@lookingglasscyber.com>]

Thanks for you question Shawn,

 

First of, I’m copying the TC lists of STIX and Interop as the user list includes non-TC members who are not allowed to contribute to the specification process.

 

Regarding your question. The answer is yes -> its mostly focused on exchange.

 

The focus for Interoperability for each of the persona is on the behavior/responsibility to *exchange* information/intelligence correctly and only focused on the behavioral aspects of that.

 

What a product does with the intelligence once it’s received (or produced) is beyond the scope of interoperability.

 

Therefore, if you have a product that has the base features as described by the TIP persona defined in the Interoperability test document then you *could* test your product in that category.

 

Allan Thomson,

CTO, Lookingglass Cyber Solutions

This electronic message transmission contains information from LookingGlass Cyber Solutions, Inc. which may be attorney-client privileged, proprietary and/or confidential. The information in this message is intended only for use by the individual(s) to whom it is addressed.  If you believe that you have received this message in error, please contact the sender, delete this message, and be aware that any review, use, disclosure, copying or distribution of the contents contained within is strictly prohibited

 

 

From: "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org> on behalf of Shawn Riley <shawn.p.riley@gmail.com>
Date: Thursday, October 19, 2017 at 9:13 AM
To: "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: [cti-users] Question on STIX 2 Interop Personas.

 

Question on STIX 2 Interop Personas. 

 

Is the Threat Intelligence Platform persona used for both Threat Intelligence Platforms that are characteristic of the 3rd age of intelligence (2001-2014) that focus on Distributed Intelligence and the next generation Threat Intelligence Platforms from the current 4th age of intelligence (2014-present) designed for Integrated Intelligence that use AI enabled analysis methodologies like ABI?

 

I am assuming they are since the interop test is mainly focused on consuming and producing STIX 2 that is in a valid JSON format for exchange and not what you do with the STIX after you get it. Just wanted to ask the question to make sure given all the different personas. 

 

Thanks,

Shawn