Re: [cti] New version of the Extension Definition Policy document

[Jamie Clark <jamie.clark@oasis-open.org>]

 Sorry, is this a private Google Doc? Not visible to me. I assume that manually loading the name of every member of CTI TC, into the perms for each one-off doc of this type, also would be a bit burdensome?Â

 Regards and happy weekend all Jamie

James Bryce Clark, General Counsel, OASIS Open, setting the standard for open collaborationÂ

On Fri, Jan 20, 2023 at 12:46 PM Rich Piazza <rpiazza@mitre.org> wrote:

Hi All,

Â

Version 1.1 of the policy document is available for review. Much has been added since version 1.0 and the document has been reorganized.Â

Â

The major additions are:

Â

• An additional level of extension definitions, called âExternalâ. This is for extension content that is developed and managed independent of the CTI TC (e.g., TLP 2.0). It was suggested that such content not be part of the specification, because its release schedule is unrelated to STIXâs.
• Best Practices for creating an Extension Definition, including the related JSON schema
• How to incorporate an approved Extension Definition into a future specification

Â

Please read the document for more details.

Â

The document will be reviewed starting at the 24 January WG meeting.

Â

This document was originally written as a Committee Note, but it contains normative language, so it cannot be officially published as such because normative language is not permitted. The TC could publish it as a Committee Specification Draft, or the normative words can be made informative, and it can remain a Committee Note. The TC needs to decide which format will be used.

Â

All the best,

Â

ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Rich

Â

--

Rich Piazza

Lead Cyber Security Engineer

The MITRE Corporation

781-271-3760

ââââââââââââââââââââââââââââââââââââ

MITRE - Solving Problems for a Safer Worldâ

Â