All,
We have had several discussion about an enhancement process. In an effort to help drive this forward and help us get high-level agreement on what this would mean, here are a few points.
Types of Enhancements
- New Objects (STIX Domain Objects, STIX Relationship Objects, Cyber Observable Objects)
- Named Groupings of new properties on an existing object
- Adding clarity or enhanced meaning to some property (example, explaining double or triple tagging of data in a “tags” property)
- Redefining some semantic meaning to some properties or objects in STIX
- Adding elements or redefining concepts in Patterning
Requirements
- Useable by the TC itself for ideas that are not well understood
- Useable by people inside the TC for their ideas
- Useable by people outside the TC for their ideas
- Ability to submit, if the creators desire, the enhancement to the TC
- If TC wants to make changes the creators can withdraw their proposal
- Ability to register, if creators desire, the enhancement in a registry run by some yet-to-be-determined group/org/method
- Ability to advertise in a STIX object that an enhancement is in use
- Ability to advertise in TAXII that an enhancement is in use
- Ability to filter in TAXII for enhancements
Please let me know if the list of possible enhancement types is correct and if you have any additional requirements.
Bret
|