OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [cti] Updated Extension Proposal

Hi Ryu -

My personal feeling is that customization of STIX will remain in the standard as-is but industry best-practices will steer orgs towards using the extension proposal as the primary mechanism to change STIX.

The rationale: JSON content can always be modified regardless of what the CTI TC decides and the customization language in the current specification can just remain as most people already have done customization in products.

However, if the TC felt that it was better to remove the customization language and replace with this extension proposal then I would be supportive of that also.

Other proponents of the extension proposal, as well as other TC members should speak up on this topic.



On Aug 5, 2020, at 11:35 PM, masuoka.ryusuke@fujitsu.com wrote:

Hi Allan,


I might have missed some discussions, but

what are the relationships between

"11 Customizing STIX" of STIX 2.1 (custom properties,

custom objects, and custom extensions) and

this SEP proposal?






From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> On Behalf Of aa tt
Sent: Thursday, August 6, 2020 12:28 AM
To: cti@lists.oasis-open.org
Subject: [cti] Updated Extension Proposal




Please find attached an updated STIX extension proposal that the mini-group worked with IBM (Jason/Emily) to incorporate an acceptable compromise to their concerns.


In summary:


1) Previously presented extension proposal is maintained and has been named âsub-component extensionâ to clarify the distinction between when it would/should be used vs the additional mechanism added for top-level extension.

2) Added the concept of Top-Level object extension to allow extension properties directly with existing STIX standard objects.

3) Clarified language/definitions around use for both aspects.


The google doc containing the specification changes are here: 


This proposal represents the agreement by all mini-group participants. We would like to encourage the TC to consider this proposal and incorporate the changes to the STIX standard.


Allan Thomson



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]