This is consistent with the need to support streaming. I endorse
this change.
Jane Ginn
On 12/2/2016 11:24 AM, Jason Keirstead
wrote:
I also support this change.
-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security
Systems
www.ibm.com/security |
www.securityintelligence.com
Without data, all you are is just another person with an opinion
- Unknown
"Kirillov,
Ivan A." ---12/01/2016 11:51:02 AM---I support this as well –
the benefits are clear, with no real drawbacks. Regards,
From: "Kirillov,
Ivan A." <ikirillov@mitre.org>
To: "cti@lists.oasis-open.org"
<cti@lists.oasis-open.org>
Date: 12/01/2016
11:51 AM
Subject: Re:
[cti] Re: bundle proposed change to STIX 2.0 RC3
Sent by: <cti@lists.oasis-open.org>
I support this as well – the benefits are
clear, with no real drawbacks.
Regards,
Ivan
From: <cti@lists.oasis-open.org>
on behalf of "Bret Jordan (CS)" <Bret_Jordan@symantec.com>
Date: Thursday,
December 1, 2016 at 8:13 AM
To: Allan Thomson <athomson@lookingglasscyber.com>,
"cti@lists.oasis-open.org"
<cti@lists.oasis-open.org>
Subject: [cti] Re:
bundle proposed change to STIX 2.0 RC3
From my standpoint, this seems like
something we should just do, and I fully support this change.
I would also like to thank Allan and
his team for their current coding work that enabled them to find
this issue.
Bret
From: cti@lists.oasis-open.org
<cti@lists.oasis-open.org>
on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Sent: Thursday, December 1,
2016 7:53:43 AM
To: cti@lists.oasis-open.org
Subject: [cti] bundle proposed
change to STIX 2.0 RC3
All –
As agreed on the last working call I was
asked to send the proposed text changes for the bundle proposal.
See the attached deck for intro.
Proposal: Change bundle to a single flat list
of objects instead of a categorized list of object types.
Rationale: To enable export and import via
streaming mechanisms and easier implementation of STIX.
Notes: No loss of functionality in this
proposal.
I made changes to Part 1 and Part 2 (not
attached). If anyone wants to see Part 2 changes (primarily 1
example change) let me know and I can send the doc.
Allan
--
_________________________
R. Jane Ginn, MSIA, MRP
Cyber Threat Intelligence Network, Inc.
jg@ctin.us
(928) 399-0509
|