timestamp proposal for STIX 2.0 RC3

[Allan Thomson <athomson@lookingglasscyber.com>]

Hi All – As discussed on the working call on Tuesday I took the action to come back with an updated proposal on how to represent timestamps numerically instead of requiring the string representation as is currently defined in STIX 2.0 RC3.

Please find attached the proposal(s).

Proposal #1 is the preferred approach but including 2 options for consideration to see if others have a different preference.

Thanks to the Greg Back from the Mitre team for doing some quick performance testing on string vs numerical based timestamp processing. I’ve included the results in the slide deck for support.

Regards

Allan

<<attachment: winmail.dat>>