OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [NEWSLETTER] RE: [cti] Re: [EXT] Re: [cti] Working Call Recap


On 16.05.2019 11:39:55, Kelley, Sarah E. wrote:
> Arenât bundles designed to be thrown away? So if the information is
> only kept at the bundle level for how the identifier is generated,
> you would lose that information as soon as the bundle drops on the
> floor. You could never retransmit with that information (in the use
> case that you were passing along data you didnât create), and the
> consumer wouldnât be able to go back and reference it in the future.
> 
> Am I missing something?
> 


You're exactly right, Sarah. STIX 2.0, Part 1, Â5 states,

"A Bundle is a collection of arbitrary STIX Objects and Marking
Definitions grouped together in a single container. A Bundle does not
have any semantic meaning and Objects are not considered related by
virtue of being in the same Bundle.

Bundle is not STIX Object, so it does not have any of the Common
Properties other than the type and id properties. Bundle is transient
and implementations should not assume that other implementations will
treat it as a persistent object."

-- 
Cheers,
Trey Darley
Co-chair, CTI TC
CTI Strategist, CERT.be
-- 
CERT.be
Centre for Cyber Security Belgium
Mail: trey.darley@cert.be
GPG: CA5B 29E4 937E 151E 2550  6607 AE9A 7FF2 8000 0E4E
-- 
Under the authority of the Prime Minister
Wetstraat 16 - 1000 Brussels - Belgium
Visiting address : Rue Ducale 4 â 1000 Brussels â Belgium
Contact: https://www.cert.be

Attachment: signature.asc
Description: PGP signature



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]