OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

cti-users message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [cti-users] Re: [cti-stix] [cti-users] MTI Binding


+1

From the article:
"a number of compelling arguments in favor of RDF. First, RDF takes syntactic and formatting issues off the table so that the people using the data can focus on core semantic issues. Second, RDF is schema promiscuous, meaning that you can create multiple models of the same data using RDF and those models can co-exist peacefully without wreaking havoc on the whole system. Third, RDF is a neutral and mature international standard governed by the W3C. It has the support and depth necessary to handle such a monumental task."

I know Bret and others are advocating "one true serialization", but I think we need to recognize that STIX will exist in ecosystems beyond our custom coded processing enclaves. People will want to integrate it with other systems and put it to other purposes. Choosing a flexible, widely supported standard format is wise. "JSON" is not enough. 

One of the things I personally like about the RDF data model is that almost everything is referenceable and can have assertions made about it. It's inherent in the design. So You can define an indicator, and then easily reference that indicator as part of a campaign. The model is designed for creating those links in a flexible manner. "JSON" and "XML" are not that way. They are rigid hierarchical trees. In RDF a "thing" can be fairly ignorant about the assertions (predicates) that can be made about itself. I believe that type of behavior is a good fit for STIX.

- Jasen.

From: <cti-users@lists.oasis-open.org> on behalf of Shawn Riley <shawn.p.riley@gmail.com>
Date: Tuesday, October 6, 2015 at 9:03 AM
To: "Kirillov, Ivan A." <ikirillov@mitre.org>
Cc: "Wunder, John A." <jwunder@mitre.org>, "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>, "cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org>
Subject: Re: [cti-users] Re: [cti-stix] [cti-users] MTI Binding

This discussion reminds of similar discussion in the healthcare industry and their quest for a universal healthcare exchange language. 





[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]