Re: [cti] Versioning Mini Group discussion

["Jason Keirstead" <Jason.Keirstead@ca.ibm.com>]

Hi all... Thanks for the efforts!

Questions:

- Was there any discussion on if versioning is required for STIX 2.0 (MVP)?

- Can you expand on this " You should be able to reference a specific version" . What is the definition of "reference" in this context - from where should I be able to reference a specific version? In a TAXII query? In a relationship?


-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com

Without data, all you are is just another person with an opinion - Unknown


---03/18/2016 08:00:47 PM---Hi All, Some of the members from the versioning mini group meet today to discuss versioning:

From: <Marlon.Taylor@us-cert.gov>
To: <cti@lists.oasis-open.org>
Date: 03/18/2016 08:00 PM
Subject: [cti] Versioning Mini Group discussion
Sent by: <cti@lists.oasis-open.org>

---

Hi All,
 
Some of the members from the versioning mini group meet today to discuss versioning:

@John-Mark, @Terry, @Sean, and @myself

Due the recent divergences on the topic of versioning, we focused on what ‘versioning’ means to us. Through our discussion we agreed upon some core principles for versioning and some derived features from those principles.
 
Core Principles

1. You must be able to determine an object’s version
2. Versions are immutable
3. You must be able to determine ordinality among versions
Features:
a. You should be able to reference the latest version
b. You should be able to reference the a specific version

Through these core principles we were able to define these terms going forward:

· Version – (Core #1) should be determined by some combination of an object’s properties
· Update – (Core #2) any modification of the properties used to determine version yields a new version

Using these principles we were able to address revocation as an update to a revoked object/version.
 
Overall it was a productive meeting and where among ourselves we have agreed on core principles for versioning.
That being said there are still open questions that need to be addressed.
 
-Marlon