STIX 2.1 CSD02 Sponsorship?

["Kirillov, Ivan A." <ikirillov@mitre.org>]

All,

 

Now that STIX 2.1 CSD02 is out the door, we can begin the sponsorship process. However, one of the questions that we (MITRE/DHS) have is with regards to the âtypeâ of sponsorship expected for each item â âfullâ (code + interop text) or just working code. If you recall from the last sponsorship period, certain things like confidence only required working code while others such as the Opinion & Note objects required interop text as well.

 

Hereâs the list of items for sponsorship, along with my own thoughts as to the type of sponsorship:

 

• COA: full
• Grouping: full
• Infrastructure: full
• Malware: full
• Malware Analysis: full
• SCOs as top-level objects: full â however, the level of detail on this one is quite open. Maybe different sponsors can choose different SCOs to cover?
• SCO relationships: working code
• Deterministic IDs: working code

 

Also, I would suggest that we donât formally start the sponsorship period until we get this question resolved, so that sponsors have a better understanding of what is expected.

 

-Ivan