Re: [cti] STIX WG

[Emily Ratliff <Emily.Ratliff@ibm.com>]

Hi Vasileios! This is great to hear! Thanks for volunteering.

 

Emily

 

From: Vasileios Mavroeidis <vasileim@ifi.uio.no>
Date: Thursday, July 27, 2023 at 10:53 AM
To: Emily Ratliff <Emily.Ratliff@ibm.com>
Cc: cti@lists.oasis-open.org <cti@lists.oasis-open.org>, Frick, Charles K., Jr. <charles.frick@jhuapl.edu>
Subject: [EXTERNAL] Re: [cti] STIX WG

Hi all, I'll be happy to lead the COA Playbook Extension. If more are interested in co-leading the effort with me and doing some preparatory work together, it would be great. We already have a lot of material with three different proposed approaches

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

    Report Suspicious    ‌

ZjQcmQRYFpfptBannerEnd

Hi all,

 

I'll be happy to lead the COA Playbook Extension. If more are interested in co-leading the effort with me and doing some preparatory work together, it would be great. We already have a lot of material with three different proposed approaches that I can present in the first meeting. Then we can take it from there.

 

Best,

 

Vasileios Mavroeidis

Professor for Cybersecurity @ University of Oslo

Standards Architect @ sekoia.io

On 25 Jul 2023, at 17:33, Emily Ratliff <Emily.Ratliff@ibm.com> wrote:

 

STIX WG members:

 

Now that the Incident extension is stable, we will turn our attention back to other topics. Please let us know if there is a topic or extension that you would like to lead.

 

We met last Friday to discuss priorities.  We will take a bit of a break in August due to vacations. There will be no meetings on Aug. 4 and Aug. 11.

 

This Friday we will pick up where we left off with the updates to the Extension Policy that Rich was spearheading.

 

Topics for future meetings include:

1. COA Playbook Extension
2. JSON Signing – we need someone to lead a minigroup on this topic
3. Container extension
4. Asset extension – we need someone to lead a minigroup on this
5. Location extension – covid previously proposed extending the Location object with GeoJSON, we need someone to lead a minigroup on this topic
6. There have been some requests to extend the Infrastructure object into the SCADA space. We need an expert to participate, if we are going to consider this.
7. Best practices for modelling x509 certificates – we need someone to lead this topic
8. Updates to the STIX Patterning Language to address the deprecation of embedded relationships

 

If you are interested in leading any of these topics, please reach out to the WG. We can use the Friday timeslot or schedule separate mini-group discussions.

 

Thanks,

 

Emily