When I look at the types of possible enhancements I think it would be good for us to tackle 1 and 2 from my list below in our first go. What do others think?
Bret
Sent from my Commodore 64
PGP
Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
All,
We have had several discussion about an enhancement process. In an effort to help drive this forward and help us get high-level agreement on what this would mean, here are a few points.
Types of Enhancements
- New Objects (STIX Domain Objects, STIX Relationship Objects, Cyber Observable Objects)
- Named Groupings of new properties on an existing object
- Adding clarity or enhanced meaning to some property (example, explaining double or triple tagging of data in a âtagsâ property)
- Redefining some semantic meaning to some properties or objects in STIX
- Adding elements or redefining concepts in Patterning
Requirements
- Useable by the TC itself for ideas that are not well understood
- Useable by people inside the TC for their ideas
- Useable by people outside the TC for their ideas
- Ability to submit, if the creators desire, the enhancement to the TC
- If TC wants to make changes the creators can withdraw their proposal
- Ability to register, if creators desire, the enhancement in a registry run by some yet-to-be-determined group/org/method
- Ability to advertise in a STIX object that an enhancement is in use
- Ability to advertise in TAXII that an enhancement is in use
- Ability to filter in TAXII for enhancements
Please let me know if the list of possible enhancement types is correct and if you have any additional requirements.
Bret
|