Sanity Check

["Jordan, Bret" <bret.jordan@bluecoat.com>]

All,

As we get nearer and nearer to completing our first milestone, the Indicator Milestone, I have a general request.  I would like everyone to take a few examples (that we will produce) along with maybe the data tables and show them to your lead incident responders, threat researchers, and lead developers over products that use this kind of data.  Preferable, these people will have very little to no previous experience with STIX and CybOX and should not have been part of any of the discussions so far for STIX 2.0.  

What I would like you to capture is:

1) Initial réponse to the design, without any background or any context, just what do they think right off the bat. 

2) Any feedback about any level of the documents.  Everything from field names and field types all the way up to the organizational concepts.  Even our use of timestamps or anything they say is missing.  

I would like to see if the design we are coming up with, is generally intuitive and understandable by people that are not living and breathing this every day.  I also want some sanity feedback on decisions we have made. 

Thanks,

Bret

Bret Jordan CISSP

Director of Security Architecture and Standards | Office of the CTO

Blue Coat Systems

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." 

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail