Re: timestamp proposal for STIX 2.0 RC3

I think it is clear that we need to do a numerical based timestamp now, the question really just comes down to which one will be the best for us.

Bret

From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Sent: Thursday, December 1, 2016 3:19:27 PM
To: cti@lists.oasis-open.org
Subject: [cti] timestamp proposal for STIX 2.0 RC3

Hi All – As discussed on the working call on Tuesday I took the action to come back with an updated proposal on how to represent timestamps numerically instead of requiring the string representation as is currently defined in STIX 2.0 RC3.

Please find attached the proposal(s).

Proposal #1 is the preferred approach but including 2 options for consideration to see if others have a different preference.

Thanks to the Greg Back from the Mitre team for doing some quick performance testing on string vs numerical based timestamp processing. I’ve included the results in the slide deck for support.

Regards

Allan

cti message