Re: [EXT] [cti] Motion for Open Repository for STIX Enhancement Proposals

From
Trey Darley <>
Date
2018-07-24T21:10:05+00:00
ID
Thread
Re: [EXT] [cti] Motion for Open Repository for STIX Enhancement Proposals
On 24.07.2018 20:25:29, Bret Jordan wrote:
> Isnât this premature ?  We do not yet have a process and have not
> yet decided on how this should be done. So I would not concur yet,
> with this request.
> 

Hi, Bret -

Cf. the attached mail, New Context are already using SEPs, as will our
CES-21 partners (3 California utilities, and 2 national labs). As our
work on defining things like ICS-related Cyber Observables is widely
applicable outside of CES-21, we'd like to ensure that other
organizations in the energy sector are able to interoperate. Our
desire is that this work be owned by OASIS, protected by the Open
Repository's CLA.

The creation of this GitHub repository will allow a lot of good work
to be contributed to the STIX community. The existence of this GitHub
repository in no way precludes the TC from defining some other process
and voting that in down the road. Meanwhile, we'd like to crack on
with some work.

Bret, unless you can articulate some harm that would come about by New
Context and our partners contributing ICS-related STIX Enhancement
Proposals to the TC via an OASIS Open Repository I would respectfully
ask that you withdraw your objection.

-- 
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"Though a good deal is too strange to be believed, nothing is too
strange to have happened." --Thomas Hardy