Motion - five more Open GitHub repositories

["Back, Greg" <gback@mitre.org>]

The first four are projects that MITRE has been working on on behalf of DHS. The last is a generic GitHub pages site (like stixproject.github.io).

 

Note: this is in addition to the CybOX Schemas motion that Ivan made yesterday.

 

Greg

 

------------------------------

 

I move that the TC approve requesting OASIS to set up OASIS Open Repository projects named cti-pattern-validator, cti-marking-prototype, cti-stix-visualization, cti-stix-validator, and cti-documentation using the following pieces of information:

 

Purpose Statement: The pattern-validator is a software tool for checking the syntax of the Cyber Threat Intelligence (CTI) STIX/CybOX Patterning expressions, which are used within STIX to express conditions (represented with the CybOX data model) that indicate particular cyber threat activity. The repository contains source code, an ANTLR grammar, automated tests and associated documentation for the tool. The pattern-validator can be used as a command-line tool or as a Python library which can be included in other applications.

Initial Maintainer: Greg Back

Open Source License: BSD-3-Clause License

GitHub Name: cti-pattern-validator

Short Description: OASIS Open Repository: Validate patterns used to express CybOX content in STIX Indicators

 

Purpose Statement: The marking-prototype is a prototype implementation of granular data markings in STIX. It provides a potential API that can be used to create and process the markings, in order to examine the utility, usability, and completeness of how the granular data markings are specified. After the markings are added to the STIX specification, the code in this library may be used as reference, or incorporated directly into other libraries, but is not intended to be released as a standalone tool or library.

Initial Maintainer: Greg Back

Open Source License: BSD-3-Clause License

GitHub Name: cti-marking-prototype

Short Description: OASIS Open Repository: Prototype for processing granular data markings in STIX

 

Purpose Statement: The STIX visualization is meant to provide producers and consumers of STIX content with a rapid way to visualize the objects in a STIX JSON file, and the relationships between those objects. The visualization is implemented in HTML, CSS, and _javascript_ (using the D3.js library), and is suitable for standalone use--either on a hosted server or as a local file--or embedded into other applications. Regardless of how deployed, the _javascript_ code in this repository does not transmit STIX data to any server; it is strictly processed within the browser in which the code is running, so it is suitable for data which the user does not wish to share.

Initial Maintainer: Greg Back

Open Source License: BSD-3-Clause License

GitHub Name: cti-stix-visualization

Short Description: OASIS Open Repository: Lightweight visualization for STIX 2.0 objects and relationships

 

Purpose Statement: The STIX validator checks that STIX JSON content conforms to the requirements specified in the STIX 2.0 specification. In addition to checking conformance with the JSON schemas located in [TODO: link to json-schemas repo], the validator checks conformance with requirements that cannot be specified in JSON schema, as well as with established "best practices". This validator is non-normative; in cases of conflict with the STIX 2.0 specification, the specification takes precedence.

Initial Maintainer: Greg Back

Open Source License: BSD-3-Clause License

GitHub Name: cti-stix-validator

Short Description: OASIS Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

 

Purpose Statement: This repository is a GitHub Pages site storing non-normative information about the work of the CTI Technical Committee.

Initial Maintainer: Greg Back

Open Source License: BSD-3-Clause License

GitHub Name: cti-documentation

Short Description: OASIS Open Repository: GitHub Pages site for STIX, CybOX, and TAXII