[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti] Thoughts on STIX and some of the other threads on this list
What about having just python-stix/cybox serve as the reference implementation? I guess I just don’t see why we must have an equivalent implementation for every
mainstream language, especially if we make implementation easier by eliminating some of the existing ambiguities in complexities in the language.
On that note, while all of the talk around JSON is great (and I'm personally for it), it really needs to happen in tandem with reduction in complexity/ambiguity, as otherwise we’re just pushing
around the same flawed data structures but in a different serialization. Accordingly, if can come to an agreement that this (JSON/other serializations + simplification) is one of the CTI’s priorities for the next release of STIX and CybOX, it would likely
go a long way towards alleviating some of the broader community’s concerns around our efforts.
-Ivan
From: <cti@lists.oasis-open.org> on behalf of "Bush, Jonathan"
Date: Monday, August 31, 2015 at 9:55 AM To: 'Jason Keirstead' Cc: Bret Jordan, Aharon Chernin, Mark Clancy, "cti@lists.oasis-open.org" Subject: RE: [cti] Thoughts on STIX and some of the other threads on this list Very fair point Jason – Do we have anyone like Mitre contracted who can maintain a set of libraries? That could be a heavy lift. If we have that, I would suggest we work with them to build out the full functionality we need, not just skeleton libraries like we have now. If we don’t have that, I would go back to the thought that our scope should be limited to a conceptual model only. We have to make a choice here, and it has big
implications. From:
cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org]
On Behalf Of Jason Keirstead / If we abstract out the complexity what we have to ‘learn’ is a set of API calls. This is how modern software is built – Not on data formats but on API formats. /
<trimmed> DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]