@Sergey P;
Didn’t we do some XML parsing benchmarking that lead to the OpenTAXII/libtaxii library changes? Could you share with the group?
J-
From: Jerome Athias <athiasjerome@gmail.com>
Date: Sunday, September 20, 2015 at 4:23 PM
To: Patrick Maroney <Pmaroney@specere.org>
Cc: Terry MacDonald <terry.macdonald@threatloop.com>, "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: Re: [cti-users] The Cosive STIX Data Generator
Date: Sunday, September 20, 2015 at 4:23 PM
To: Patrick Maroney <Pmaroney@specere.org>
Cc: Terry MacDonald <terry.macdonald@threatloop.com>, "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: Re: [cti-users] The Cosive STIX Data Generator
Thanks Terry & co.
Great initiative.
Regarding performance testing, I wonder if some folks there did some XML parsing libraries benchmarking?
(Fyi, I started some tooling, but beta release expected end of year, after RSA talk, and some FIFA16 games... Just attached 2 preview screenshots)
Keep it up!
Cheers
2015-09-20 16:25 GMT+03:00 Patrick Maroney
<Pmaroney@specere.org>:
Terry,
Many thanks to you and your Team for this contribution to "our thing".
I was planning on re-surfacing the legacy discussions around the "Test Dataset Initiative" and community conventions for the marking of "Test Data" to support large scale operational functional and performance testing of (commingled) CTI once the CTI TC Interoperability SC is established.
In the meantime, providing a method in the Cosive STIX Generator UI/API to override the default Namespace declarations would be very useful.
Patrick Maroney
President
Integrated Networking Technologies, Inc.
Desk: (856)983-0001
Cell: (609)841-5104
Email: pmaroney@specere.org
Hi All,
As Patrick mentioned early last week, Cosive recently released the free online STIX Data Generator to automatically generate STIX content. It's purpose is twofold:
- To help people learn more about STIX document structures
- To help people test their STIX products
The STIX Data Generator allows users to select the version of STIX they wish to generate, the number of objects they want returned, and which objects they wish the generator will select from. A STIX document is then constructed to the users specifications.
Data generated by the STIX Data Generator is always within the http://stix.exampledata.org namespace, allowing vendors to easily differentiate test data from real production data. The stix.exampledata.org domain is owned by Cosive; we use it solely for test STIX data and we would like to invite anyone to use stix.exampledata.org as the namespace for your test STIX dataset too.
One useful feature is that the STIX Data Generator also has an API, allowing one to generate STIX documents using wget or curl from inside a script. That provides some nice possibilities for scripting automatic tests. Some basic API usage examples are:curl 'https://api.cosive.com/sdg/v1/stix' # basic form, STIX 1.2 w/ random objects curl 'https://api.cosive.com/sdg/v1/stix?version=1.1.1' # pick your STIX output version, 1.2 or 1.1.1 curl 'https://api.cosive.com/sdg/v1/stix?version=1.2&count=50&objects=url,domain' # 50 URLs and domains, STIX 1.2More information is available on the website: https://generator.cosive.com.
We'd really appreciate feedback, especially around the objects included in the STIX Data Generator. If you have some recommendations on what we should work on next, we'd love to hear them!
Cheers
Terry MacDonald, Chris Horsley and Kayne Naughton