[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti] Re: [EXT] Re: [cti] STIX 2.1 CSD02 Sponsorship?
We will talk about this on next week's working call. But I think it can be what ever we thing it needs to be. The work MITRE has already done on deterministic IDs has been awesome. It has found several problems that we were already able to address. This
just goes to show how valuable this sponsorship work is.
Bret
From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Kirillov, Ivan A. <ikirillov@mitre.org>
Sent: Friday, August 30, 2019 9:21 AM To: Allan Thomson <athomson@lookingglasscyber.com>; cti@lists.oasis-open.org <cti@lists.oasis-open.org> Subject: Re: [cti] Re: [EXT] Re: [cti] STIX 2.1 CSD02 Sponsorship? Hi Allan,
What I’m trying to get at is whether the sponsored item requires interop text (including profile, examples, etc.) and working code or just working code. Some items, like deterministic IDs, seem like they’ll only require code while others will require both interop + code.
Discussing at the next working call sounds good to me.
Thanks, Ivan
From: <cti@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Hi Ivan – not exactly sure what you mean by ‘type’ of sponsorship.
Or
Do you mean more examples that we want for SCO sponsorship verification?
Maybe we can add this discussion topic to the next weekly meeting.
Allan Thomson CTO (+1-408-331-6646)
From: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org> on behalf of "Kirillov, Ivan" <ikirillov@mitre.org>
That makes sense to me, Allan. Any other thoughts as to the “type” of sponsorship for the below items?
Thanks, Ivan
From: <cti@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Ivan – I would suggest that the user of SCO as top-level objects just needs to be conceptually verified.
A couple of real-world examples might suffice.
Those 2 examples might be good enough.
Allan Thomson CTO (+1-408-331-6646)
From: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org> on behalf of "Kirillov, Ivan" <ikirillov@mitre.org>
All,
Now that STIX 2.1 CSD02 is out the door, we can begin the sponsorship process. However, one of the questions that we (MITRE/DHS) have is with regards to the “type” of sponsorship expected for each item – “full” (code + interop text) or just working code. If you recall from the last sponsorship period, certain things like confidence only required working code while others such as the Opinion & Note objects required interop text as well.
Here’s the list of items for sponsorship, along with my own thoughts as to the type of sponsorship:
Also, I would suggest that we don’t formally start the sponsorship period until we get this question resolved, so that sponsors have a better understanding of what is expected.
-Ivan |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]