Re: [EXT] [cti-stix] Re: [cti-interoperability] Re: [cti-stix] STIX Preferred Documents For Review/Comments

From
Bret Jordan <>
Date
2018-03-13T15:34:36+00:00
ID
Thread
Re: [EXT] [cti-stix] Re: [cti-interoperability] Re: [cti-stix] STIX Preferred Documents For Review/Comments
I could not find text that talks about which versions of the specification you are claiming conformance to and which product version that maps to.  So if a product does this for STIX 2.0 does that mean they get to keep using this mark even with 2.5 is out?

Bret 

Sent from my Commodore 64 

PGP
 Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

On Mar 13, 2018, at 8:19 AM, Jason Keirstead <> wrote:

I am trying to align this document with what is going to be listed on the OASIS website.

I presumed that what is going to be listed on the OASIS website would outline the personas tested against.

It seems strange to allow an Attestation so vague that it doesn't outline the personas you're attesting to...

Below is the only thing you actually say in the attestation..

--

Which of the CTI Interop Tests was applied to the product or service listed in this Attestation?

______ STIX/TAXIITM 2.0 Interoperability Test Document - Part 1

______ STIX/TAXIITM 2.0 Interoperability Test Document - Part 2

-

Jason Keirstead

STSM, Product Architect, Security Intelligence, IBM Security Systems

www.ibm.com/security

"Things may come to those who wait, but only the things left by those who hustle." - Unknown

From:        Allan Thomson <>

To:        Jason Keirstead <>

Cc:        "" <>,
 "" <>, "Interoperability Subcommittee" <>

Date:        03/13/2018 09:58 AM

Subject:        [cti-interoperability] Re: [cti-stix] STIX Preferred Documents For Review/Comments

Sent by:        <>

The instructions/terms of use documents refer to the test plan documents.

 

However, the intention is that these documents do not have to be revised for every change to the test documents and act more as a general framework for the overall program going forward.

 

Please consider that these are not replacements for our test documents but rather a framework around them.

 

Allan

 

From: Jason Keirstead <>

Date: Monday, March 12, 2018 at 8:16 PM

To: Allan Thomson <>

Cc: "" <>, "" <>,
 Interoperability Subcommittee <>

Subject: Re: [cti-stix] STIX Preferred Documents For Review/Comments

 

Isn't the personas being tested missing?

Sent from IBM Verse

Allan Thomson --- [cti-stix] STIX Preferred Documents For Review/Comments ---

 

From:

"Allan Thomson" <>

To:

,


Cc:

"Interoperability Subcommittee" <>

Date:

Mon, Mar 12, 2018 8:16 PM

Subject:

[cti-stix] STIX Preferred Documents For Review/Comments

<mime-attachment.png>

 

All – I have posted 2 documents that have been drafted by OASIS legal team for

 

Instructions on STIX Preferred program

Terms of use on STIX Preferred program

 

Please review these documents and if you have any comments or concerns please submit them to the Interop sub-committee by 19th March (1 week from today).

 

SUGGESTION: Have your legal or GC teams also review these documents if you plan to have your organization participate in STIX Preferred.

 

If you would prefer to raise your concerns in person please plan to attend the Interop sub-committee meetings on Weds 9am PST. Details are on Kavi.

 

We plan to do a ballot on formal TC approval of these documents but we wanted to solicit feedback/comments before we do that.

 

We expect the ballot to start sometime after 19th March.

 

Allan

 

Document Name: STIX
 Preferred Instructions Draft

<mime-attachment.png>

Description

STIX Preferred Instructions Draft 

Download
 Latest Revision

Public
 Download Link

 

Document Name: STIX
 Preferred Terms of Use Draft

Description

STIX Preferred Terms of Use Draft 

Download
 Latest Revision

Public
 Download Link