Re: [cti-users] RE: location was: STIX 2.0 expected CS approval date

They aren’t included in 2.0.

One of the topics we have for STIX 2.1 is how to include location attributes and where you should put them. The TC will be discussing it once a few other conversations are finished up.

John

From: <cti-users@lists.oasis-open.org> on behalf of Jerome Athias <jerome.athias@protonmail.com>
Reply-To: Jerome Athias <jerome.athias@protonmail.com>
Date: Wednesday, March 15, 2017 at 12:59 PM
To: "Elihu.E.El@nga.mil" <Elihu.E.El@nga.mil>
Cc: "cti-users@lists.oasis-open.org" <cti-users@lists.oasis-open.org>
Subject: Re: [cti-users] RE: [Non-DoD Source] [cti-users] STIX 2.0 expected CS approval date

Hi,

I don't think that would happen (except maybe for Identity (Person)) without an Asset concept (SDO?).

Potentially, when (if) the TC gets the value of 'abstraction' from OpenC2 (a la JAEN, even if without semantics ((Ontology))) (or Information Model) from where, you could, potentially, by alignement, get WGS84 from IETF SACM.

Best regards

-------- Original Message --------

Subject: [cti-users] RE: [Non-DoD Source] [cti-users] STIX 2.0 expected CS approval date

Local Time: 14 mars 2017 9:47 PM

UTC Time: 14 mars 2017 18:47

From: Elihu.E.El@nga.mil

To: Richard.vandenBerg@ncsc.nl, cti-users@lists.oasis-open.org

Classification: UNCLASSIFIED

======================================================

Hello,

Question - Are we adding the Latitude, Longitude, and Elevation properties to the STIX components in 2.0???

Warm Regards,

Eli

Elihu Eli El, Scrum, Safe Agile, ITIL

Systems Engineer

NGA DOG

Unclassified: 571-558-4351

Secure: 579-4351

Elihu.E.El@nga.mil

GSM: https://www.geoint.community/

-----Original Message-----

From: cti-users@lists.oasis-open.org [mailto:cti-users@lists.oasis-open.org] On Behalf Of Richard van den Berg (NCSC-NL)

Sent: Tuesday, March 14, 2017 1:06 PM

To: cti-users@lists.oasis-open.org

Subject: [Non-DoD Source] [cti-users] STIX 2.0 expected CS approval date

This email was sent from a non-Department of Defense email account, and contained active links. Please verify the identity of the sender, and confirm authenticity of all links contained within the message.

This email was sent from a non-Department of Defense email account, and contained active links. Please verify the identity of the sender, and confirm authenticity of all links contained within the message.

Dear list,

We are starting the process to add STIX/TAXII to the "comply or explain" list of the Dutch government. We are aiming to add STIX 2.0, but the current Committee Specification Draft status might be an issue. I understand STIX 2.0 is currently in the Public Review stage since 24 February[1]. Is there an expected CS approval date for STIX 2.0? I see that for STIX 1.2.1 it took 5 months to get from Public Review[2] to Committee Specification approval[3]. Is that a fair timeline to work with for STIX 2.0?

Additional, does it make any sense use STIX 2.0 in combination with TAXII 1.1.1 ? Because the CS approval date for TAXII 2.0 will most certainly be after our new "comply or explain" list is published (as it is lagging 2 months behind STIX 2.0 in the process).

[1]: Caution-issues.oasis-open.org/browse/TCADMIN-2544

[2]: Caution-issues.oasis-open.org/browse/TCADMIN-2266

[3]: Caution-www.oasis-open.org/committees/ballot.php?id=2928

Kind regards,

Richard van den Berg

............................................................................

Nationaal Cyber Security Centrum

Postbus 117 | 2501 CC| Den Haag | Caution-www.ncsc.nl<Caution-www.ncsc.nl/>

............................................................................

T 070 888 7555 (algemeen)

M 06 5207 1109

E richard.vandenberg@ncsc.nl<mailto:richard.vandenberg@ncsc.nl>

PGP 46FD 20E0 8257 9081 81A9 5254 A7A3 6869 5D24 D3B6 ............................................................................

Bezoekadres:

Turfmarkt 147 | 2511 DP | Den Haag

======================================================

Classification: UNCLASSIFIED

This publicly archived list provides a forum for asking questions,

offering answers, and discussing topics of interest on STIX,

TAXII, and CybOX. Users and developers of solutions that leverage

STIX, TAXII and CybOX are invited to participate.

In order to verify user consent to OASIS mailing list guidelines

and to minimize spam in the list archive, subscription is required

before posting.

Subscribe: cti-users-subscribe@lists.oasis-open.org

Unsubscribe: cti-users-unsubscribe@lists.oasis-open.org

Post: cti-users@lists.oasis-open.org

List help: cti-users-help@lists.oasis-open.org

List archive: http://lists.oasis-open.org/archives/cti-users/

List Guidelines: http://www.oasis-open.org/maillists/guidelines.php

CTI Technical Committee: https://www.oasis-open.org/committees/cti/

Join OASIS: http://www.oasis-open.org/join/

cti-users message