Re: [cti] Re: bundle proposed change to STIX 2.0 RC3

[Terry MacDonald <terry.macdonald@cosive.com>]

I also support this pragmatic change.

Cheers

Terry MacDonald

Cosive

On 3 Dec. 2016 7:25 am, "Jason Keirstead" <Jason.Keirstead@ca.ibm.com> wrote:

I also support this change.

-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com

Without data, all you are is just another person with an opinion - Unknown


"Kirillov, Ivan A." ---12/01/2016 11:51:02 AM---I support this as well – the benefits are clear, with no real drawbacks. Regards,

From: "Kirillov, Ivan A." <ikirillov@mitre.org>
To: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
Date: 12/01/2016 11:51 AM
Subject: Re: [cti] Re: bundle proposed change to STIX 2.0 RC3
Sent by: <cti@lists.oasis-open.org>

---

I support this as well – the benefits are clear, with no real drawbacks.

Regards,
Ivan

From: <cti@lists.oasis-open.org> on behalf of "Bret Jordan (CS)" <Bret_Jordan@symantec.com>
Date: Thursday, December 1, 2016 at 8:13 AM
To: Allan Thomson <athomson@lookingglasscyber.com>, "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
Subject: [cti] Re: bundle proposed change to STIX 2.0 RC3

From my standpoint, this seems like something we should just do, and I fully support this change.

I would also like to thank Allan and his team for their current coding work that enabled them to find this issue.

Bret

---

From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Sent: Thursday, December 1, 2016 7:53:43 AM
To: cti@lists.oasis-open.org
Subject: [cti] bundle proposed change to STIX 2.0 RC3

All –

As agreed on the last working call I was asked to send the proposed text changes for the bundle proposal. See the attached deck for intro.

Proposal: Change bundle to a single flat list of objects instead of a categorized list of object types.
Rationale: To enable export and import via streaming mechanisms and easier implementation of STIX.
Notes: No loss of functionality in this proposal.

I made changes to Part 1 and Part 2 (not attached). If anyone wants to see Part 2 changes (primarily 1 example change) let me know and I can send the doc.

Allan