OASIS Cyber Threat Intelligence (CTI) TC

 View Only
Expand all | Collapse all

[cti] STIX Subcommittee Nomination

  • 1.  [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:09
    Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------


  • 2.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:10
    Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. --------------------------------------------------------------------- -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC 542 Gibraltar Drive Milpitas CA 95035 USA


  • 3.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:20
    I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. --------------------------------------------------------------------- -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC 542 Gibraltar Drive Milpitas CA 95035 USA Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 4.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:24
    I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases. Aharon Chernin CTO SOLTRA An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Jordan, Bret <bret.jordan@bluecoat.com> Sent: Thursday, June 18, 2015 3:20 PM To: tony@yaanatech.com Cc: mona.magathan@usbank.com; cti@lists.oasis-open.org Subject: Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. --------------------------------------------------------------------- -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC 542 Gibraltar Drive Milpitas CA 95035 USA


  • 5.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:27
    The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0 Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote: I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases. Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC   542 Gibraltar Drive   Milpitas CA 95035 USA   Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 6.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:33
    I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J- From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0 Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote: I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases. Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC   542 Gibraltar Drive   Milpitas CA 95035 USA  


  • 7.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:54
    I just want to make sure that everyone understands that the amount of actual work that is required for STIX 1.3 (or however it gets numbered) is minimal (mostly editorial changes to comply with OASIS policies) and therefore the overhead and complexity of yet another subcommittee that would exist only for a relatively brief time (months) is hard to justify IMHO.  We also run the risk of bifurcation between 1.3 and 2.0.  I think that a single STIX subcommittee would be most appropriate to shepherd both sets of specs.  A single STIX subcommittee could make sure 1.3 was in process and then turn its attention to 2.0 without much effort.   Finally, I can’t imagine someone being really interested in STIX 1.3 but not being interested in STIX 2.0 and I’d hate to have people feel like they need to choose or participate in a whole boatload of subcommittees, each with their own meetings.   From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Joep Gommers Sent: Thursday, June 18, 2015 3:33 PM To: Jordan, Bret; Aharon Chernin Cc: tony@yaanatech.com; mona.magathan@usbank.com; cti@lists.oasis-open.org Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA     Attachment: smime.p7s Description: S/MIME cryptographic signature


  • 8.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 20:25
    I think the amount of work for 1.3 and its maintenance will be a lot bigger and take lot more time then we realize.  Given the cadence of this group in the past and all of the dynamic personalities that exist, I can see the initial work for STIX 1.3 taking at least 2 months to complete.  And then we have all of the approvals and public comments. So say we can get STIX 1.3 is out the door by October / November, then that group will also have maintenance and tweaking and such to do for several years to come.  Or at least until STIX 2.0 is done and everyone is given plenty of time to migrate (say 6-12 month migration).  And in fact some groups and users may use STIX 1.x for many years to come.   STIX 2.0 represents a lot of major changes that need to happen to support all of the things we have been working on and talking about for well over 12 months. I can see STIX 2.0 taking, with this group and its dynamics, 18-24 months to complete, then you have the approvals and then system migrations. If it was purely up to me, I would have STIX 1.3 done by end of month and I would have STIX 2.0 done by end of year, but alas, it is not. Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:53, Struse, Richard < Richard.Struse@HQ.DHS.GOV > wrote: I just want to make sure that everyone understands that the amount of actual work that is required for STIX 1.3 (or however it gets numbered) is minimal (mostly editorial changes to comply with OASIS policies) and therefore the overhead and complexity of yet another subcommittee that would exist only for a relatively brief time (months) is hard to justify IMHO.  We also run the risk of bifurcation between 1.3 and 2.0.  I think that a single STIX subcommittee would be most appropriate to shepherd both sets of specs.  A single STIX subcommittee could make sure 1.3 was in process and then turn its attention to 2.0 without much effort.   Finally, I can’t imagine someone being really interested in STIX 1.3 but not being interested in STIX 2.0 and I’d hate to have people feel like they need to choose or participate in a whole boatload of subcommittees, each with their own meetings.   From:   cti@lists.oasis-open.org   [ mailto:cti@lists.oasis-open.org ]   On Behalf Of   Joep Gommers Sent:   Thursday, June 18, 2015 3:33 PM To:   Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ;   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From:   Jordan, Bret < bret.jordan@bluecoat.com > Date:   Thursday, June 18, 2015 at 9:26 PM To:   Aharon Chernin < achernin@soltra.com > Cc:   tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject:   Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org   < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.         I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables:   Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 9.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 21:19
    So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here. sean From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J- From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0 Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote: I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases. Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC   542 Gibraltar Drive   Milpitas CA 95035 USA  


  • 10.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 21:46
    That I think makes more sense.   From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Barnum, Sean D. Sent: Thursday, June 18, 2015 3:43 PM To: Joep Gommers; Jordan, Bret; Aharon Chernin Cc: tony@yaanatech.com; mona.magathan@usbank.com; cti@lists.oasis-open.org Subject: Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA     DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 11.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 23:47
    Agreed. Note trimming addressee's. "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" <jbush@dtcc.com> To: "'Barnum, Sean D.'" <sbarnum@mitre.org>, Joep Gommers <joep@intelworks.com>, "Jordan, Bret" <bret.jordan@bluecoat.com>, "Aharon Chernin" <achernin@soltra.com> Cc: "tony@yaanatech.com" <tony@yaanatech.com>, "mona.magathan@usbank.com" <mona.magathan@usbank.com>, "cti@lists.oasis-open.org" <cti@lists.oasis-open.org> Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: <cti@lists.oasis-open.org> That I think makes more sense.   From:  cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:  tony@yaanatech.com; mona.magathan@usbank.com; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 12.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 00:10
    STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll "lose" more than I "win", but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as "our thing". Patrick Maroney Office:  (856)983-0001 Cell::     (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" < jbush@dtcc.com > To: "'Barnum, Sean D.'" < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, "Jordan, Bret" < bret.jordan@bluecoat.com >, "Aharon Chernin" < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 13.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 01:58
    Hi All, I prefer the original sub-committee plan of separation into TAXII, STIX and CybOX sub-committees. In my opinion,  the use of three sub-committees, each overseeing each individual standard continues the structure that has proven so effective over the last few years. Some people only care about STIX, others about TAXII, and having that separation means people only need to see discussions if they care about that particular standard. If they don't, then they can only participate in the sub-committees they care about.  I would be worried about splicing the subcommittees into version specific sub-sub-committees. I personally think that would dilute the discussions, and there would be the possibility of information being seen by the STIX v1.3 sub-sub-committee that would be potentially be missed by the STIX v2.0 sub-sub-committee. I'm doubtful this would work. In any case, the formation of the 2 sub-committees is already defined in our CTI TC Charter. From what I have read, changing this would result in us rechartering the TC ( https://www.oasis-open.org/policies-guidelines/tc-process#rechartering ), which is not something any of us want to see at this early stage.   Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 10:09, Patrick Maroney < Pmaroney@specere.org > wrote: STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll "lose" more than I "win", but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as "our thing". Patrick Maroney Office:  (856)983-0001 Cell::     (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" < jbush@dtcc.com > To: "'Barnum, Sean D.'" < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, "Jordan, Bret" < bret.jordan@bluecoat.com >, "Aharon Chernin" < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php


  • 14.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 03:54
    After talking to several people I will withdraw my request to have version specific sub-committees.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 19:57, Terry MacDonald < terry.macdonald@threatloop.com > wrote: Hi All, I prefer the original sub-committee plan of separation into TAXII, STIX and CybOX sub-committees. In my opinion,  the use of three sub-committees, each overseeing each individual standard continues the structure that has proven so effective over the last few years. Some people only care about STIX, others about TAXII, and having that separation means people only need to see discussions if they care about that particular standard. If they don't, then they can only participate in the sub-committees they care about.  I would be worried about splicing the subcommittees into version specific sub-sub-committees. I personally think that would dilute the discussions, and there would be the possibility of information being seen by the STIX v1.3 sub-sub-committee that would be potentially be missed by the STIX v2.0 sub-sub-committee. I'm doubtful this would work. In any case, the formation of the 2 sub-committees is already defined in our CTI TC Charter. From what I have read, changing this would result in us rechartering the TC ( https://www.oasis-open.org/policies-guidelines/tc-process#rechartering ), which is not something any of us want to see at this early stage.   Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 10:09, Patrick Maroney < Pmaroney@specere.org > wrote: STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll lose more than I win , but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as our thing . Patrick Maroney Office:  (856)983-0001 Cell::     (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. <graycol.gif> Bush, Jonathan ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: Bush, Jonathan < jbush@dtcc.com > To: 'Barnum, Sean D.' < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, Jordan, Bret < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: Jordan, Bret < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: Jordan, Bret < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 15.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 09:39
    while we'll probably come with multiple (sub) -Technical- Committees, I wonder if we should have a " Management Committee"  on top of them? But maybe that's what is currently called TC in OASIS and why we have Subcommittees... (@Chet ?) (Sorry if it is just semantic...) Best regards 2015-06-19 6:53 GMT+03:00 Jordan, Bret < bret.jordan@bluecoat.com > : After talking to several people I will withdraw my request to have version specific sub-committees.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 19:57, Terry MacDonald < terry.macdonald@threatloop.com > wrote: Hi All, I prefer the original sub-committee plan of separation into TAXII, STIX and CybOX sub-committees. In my opinion,  the use of three sub-committees, each overseeing each individual standard continues the structure that has proven so effective over the last few years. Some people only care about STIX, others about TAXII, and having that separation means people only need to see discussions if they care about that particular standard. If they don't, then they can only participate in the sub-committees they care about.  I would be worried about splicing the subcommittees into version specific sub-sub-committees. I personally think that would dilute the discussions, and there would be the possibility of information being seen by the STIX v1.3 sub-sub-committee that would be potentially be missed by the STIX v2.0 sub-sub-committee. I'm doubtful this would work. In any case, the formation of the 2 sub-committees is already defined in our CTI TC Charter. From what I have read, changing this would result in us rechartering the TC ( https://www.oasis-open.org/policies-guidelines/tc-process#rechartering ), which is not something any of us want to see at this early stage.   Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 10:09, Patrick Maroney < Pmaroney@specere.org > wrote: STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll "lose" more than I "win", but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as "our thing". Patrick Maroney Office:  (856)983-0001 Cell::     (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. <graycol.gif> "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" < jbush@dtcc.com > To: "'Barnum, Sean D.'" < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, "Jordan, Bret" < bret.jordan@bluecoat.com >, "Aharon Chernin" < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php


  • 16.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 11:15
    Hi Jerome, I believe the CTI TC is the 'one ring to rule them all' (sorry watching Lord on the Rings right now on TV). I guess that's the mgmt committee you're referring to? Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 19:38, Jerome Athias < athiasjerome@gmail.com > wrote: while we'll probably come with multiple (sub) -Technical- Committees, I wonder if we should have a " Management Committee"  on top of them? But maybe that's what is currently called TC in OASIS and why we have Subcommittees... (@Chet ?) (Sorry if it is just semantic...) Best regards 2015-06-19 6:53 GMT+03:00 Jordan, Bret < bret.jordan@bluecoat.com > : After talking to several people I will withdraw my request to have version specific sub-committees.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 19:57, Terry MacDonald < terry.macdonald@threatloop.com > wrote: Hi All, I prefer the original sub-committee plan of separation into TAXII, STIX and CybOX sub-committees. In my opinion,  the use of three sub-committees, each overseeing each individual standard continues the structure that has proven so effective over the last few years. Some people only care about STIX, others about TAXII, and having that separation means people only need to see discussions if they care about that particular standard. If they don't, then they can only participate in the sub-committees they care about.  I would be worried about splicing the subcommittees into version specific sub-sub-committees. I personally think that would dilute the discussions, and there would be the possibility of information being seen by the STIX v1.3 sub-sub-committee that would be potentially be missed by the STIX v2.0 sub-sub-committee. I'm doubtful this would work. In any case, the formation of the 2 sub-committees is already defined in our CTI TC Charter. From what I have read, changing this would result in us rechartering the TC ( https://www.oasis-open.org/policies-guidelines/tc-process#rechartering ), which is not something any of us want to see at this early stage.   Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 10:09, Patrick Maroney < Pmaroney@specere.org > wrote: STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll "lose" more than I "win", but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as "our thing". Patrick Maroney Office:  (856)983-0001 Cell::     (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. <graycol.gif> "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" < jbush@dtcc.com > To: "'Barnum, Sean D.'" < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, "Jordan, Bret" < bret.jordan@bluecoat.com >, "Aharon Chernin" < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php


  • 17.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 15:57
    It is an interesting idea.  The Technical Committee as a whole must ultimately approve any work products that go forward in the OASIS process. That said, there is no reason why the TC could not adopt a 'Management SC' or 'Steering SC' or 'Coordinating SC' or something like that to help manage the workload and bring back concise questions and/or draft work products to the TC as a whole to discuss. Since all SCs are open to any members who want to join and since all SCs will have their own mailing list, that could be a way to keep traffic and discussion manageable.  It hasn't been done before at least that I can think of but then again we don't have any TCs with over 100 enthusiastic members either...  On Fri, Jun 19, 2015 at 7:14 AM, Terry MacDonald < terry.macdonald@threatloop.com > wrote: Hi Jerome, I believe the CTI TC is the 'one ring to rule them all' (sorry watching Lord on the Rings right now on TV). I guess that's the mgmt committee you're referring to? Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 19:38, Jerome Athias < athiasjerome@gmail.com > wrote: while we'll probably come with multiple (sub) -Technical- Committees, I wonder if we should have a " Management Committee"  on top of them? But maybe that's what is currently called TC in OASIS and why we have Subcommittees... (@Chet ?) (Sorry if it is just semantic...) Best regards 2015-06-19 6:53 GMT+03:00 Jordan, Bret < bret.jordan@bluecoat.com > : After talking to several people I will withdraw my request to have version specific sub-committees.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."  On Jun 18, 2015, at 19:57, Terry MacDonald < terry.macdonald@threatloop.com > wrote: Hi All, I prefer the original sub-committee plan of separation into TAXII, STIX and CybOX sub-committees. In my opinion,  the use of three sub-committees, each overseeing each individual standard continues the structure that has proven so effective over the last few years. Some people only care about STIX, others about TAXII, and having that separation means people only need to see discussions if they care about that particular standard. If they don't, then they can only participate in the sub-committees they care about.  I would be worried about splicing the subcommittees into version specific sub-sub-committees. I personally think that would dilute the discussions, and there would be the possibility of information being seen by the STIX v1.3 sub-sub-committee that would be potentially be missed by the STIX v2.0 sub-sub-committee. I'm doubtful this would work. In any case, the formation of the 2 sub-committees is already defined in our CTI TC Charter. From what I have read, changing this would result in us rechartering the TC ( https://www.oasis-open.org/policies-guidelines/tc-process#rechartering ), which is not something any of us want to see at this early stage.   Cheers Terry MacDonald STIX, TAXII, CybOX Consultant M: +61-407-203-026 E:  terry.macdonald@threatloop.com W:  www.threatloop.com Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those of my employers. On 19 June 2015 at 10:09, Patrick Maroney < Pmaroney@specere.org > wrote: STIX/CybOX/TAXII Veterans:   One good thing, folks:  We now have the formal processes to end the discourse, after we've reasonably considered all views, cast our votes to establish overall community consensus, and then move on to the next set of challenges.   I'm sure I'll "lose" more than I "win", but look forward to engaging with all of you, especially those who bring a diverse set of perspectives and knowledge to what we can now globally refer to as "our thing". Patrick Maroney Office:   (856)983-0001 Cell::      (609)841-5104 Email:   pmaroney@specere.org From: < cti@lists.oasis-open.org > on behalf of Peter Allor < pallor@us.ibm.com > Date: Thursday, June 18, 2015 at 7:46 PM To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: RE: [cti] STIX Subcommittee Nomination Agreed. Note trimming addressee's. <graycol.gif> "Bush, Jonathan" ---06/18/2015 05:46:42 PM---That I think makes more sense. From: cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On B From: "Bush, Jonathan" < jbush@dtcc.com > To: "'Barnum, Sean D.'" < sbarnum@mitre.org >, Joep Gommers < joep@intelworks.com >, "Jordan, Bret" < bret.jordan@bluecoat.com >, "Aharon Chernin" < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Date: 06/18/2015 05:46 PM Subject: RE: [cti] STIX Subcommittee Nomination Sent by: < cti@lists.oasis-open.org > That I think makes more sense.   From:   cti@lists.oasis-open.org [ mailto:cti@lists.oasis-open.org ] On Behalf Of Barnum, Sean D. Sent:  Thursday, June 18, 2015 3:43 PM To:  Joep Gommers; Jordan, Bret; Aharon Chernin Cc:   tony@yaanatech.com ; mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173 achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org  < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:  Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:  Re: [cti] STIX Subcommittee Nomination     I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP   Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com  wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC   542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php -- /chet  ---------------- Chet Ensign Director of Standards Development and TC Administration  OASIS: Advancing open standards for the information society http://www.oasis-open.org Primary: +1 973-996-2298 Mobile: +1 201-341-1393 


  • 18.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 21:47
    If we have one big STIX committee then I would want the structure underneath it to represents separate sub-working groups with their own leaders, deliverables. and own working spaces.  Can OASIS setup that kind of structure?  I want the working groups to be focused on what they are trying to do.  For example I could see a structure like: STIX - Sean and ????? (maybe Joep or?? ) STIX 1.x - Someone from MITRE and Aharon STIX 2.x - ??????????? Given the community that Aharon already supports and needs to support, it is really important that he be involved in the STIX 1.x work.  That is not to say that he is not also highly involved or a co-chair of STIX 2.x, but I feel he really needs to make sure that STIX 1.x does what it should.   In my mind it is also very important that chairs of working groups and sub-working groups have the time to actually spend on it.  We have way too much work to do to have partially committed leadership.  Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:42, Barnum, Sean D. < sbarnum@mitre.org > wrote: So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here. sean From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: Jordan, Bret < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J- From: Jordan, Bret < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0 Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote: I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases. Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.     I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote: Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC   542 Gibraltar Drive   Milpitas CA 95035 USA   Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 19.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 21:53
    Bret – I think your email below is the opposite of what Sean proposed, unless I’m reading it wrong.    From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Jordan, Bret Sent: Thursday, June 18, 2015 5:47 PM To: Sean D. Barnum Cc: Joep Gommers; Aharon Chernin; tony@yaanatech.com; mona.magathan@usbank.com; cti@lists.oasis-open.org Subject: Re: [cti] STIX Subcommittee Nomination   If we have one big STIX committee then I would want the structure underneath it to represents separate sub-working groups with their own leaders, deliverables. and own working spaces.  Can OASIS setup that kind of structure?  I want the working groups to be focused on what they are trying to do.  For example I could see a structure like:   STIX - Sean and ????? (maybe Joep or?? )             STIX 1.x - Someone from MITRE and Aharon             STIX 2.x - ???????????   Given the community that Aharon already supports and needs to support, it is really important that he be involved in the STIX 1.x work.  That is not to say that he is not also highly involved or a co-chair of STIX 2.x, but I feel he really needs to make sure that STIX 1.x does what it should.     In my mind it is also very important that chairs of working groups and sub-working groups have the time to actually spend on it.  We have way too much work to do to have partially committed leadership.    Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:42, Barnum, Sean D. < sbarnum@mitre.org > wrote:   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA       DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 20.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 22:15
    I was trying to just spell out exact what I read from Sean.  That we have one top level STIX working group, but then have sub-working groups (I think he called them work product efforts ) underneath.  And each (using his terminology) work product efforts would have their own leadership to drive it and make sure it gets done.   I just do not see the STIX 1.x work going away anytime in the next few years.  It will slow down, yes, but it is not going away. And we need a group of people that are committed to its success and making sure the investments made by people hold true.  The problem we have had over and over again on the old MITRE lists is discussions of future work and current work getting cross mixed and people getting all in a dither about the sky falling and the sun exploding.  I feel like if we keep them on separate lists, then it will be easy for people to discern what is being proposed and talked about.  Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 15:52, Bush, Jonathan < jbush@dtcc.com > wrote: Bret – I think your email below is the opposite of what Sean proposed, unless I’m reading it wrong.    From:   cti@lists.oasis-open.org   [ mailto:cti@lists.oasis-open.org ]   On Behalf Of   Jordan, Bret Sent:   Thursday, June 18, 2015 5:47 PM To:   Sean D. Barnum Cc:   Joep Gommers; Aharon Chernin;   tony@yaanatech.com ;   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   If we have one big STIX committee then I would want the structure underneath it to represents separate sub-working groups with their own leaders, deliverables. and own working spaces.  Can OASIS setup that kind of structure?  I want the working groups to be focused on what they are trying to do.  For example I could see a structure like:   STIX - Sean and ????? (maybe Joep or?? )               STIX 1.x - Someone from MITRE and Aharon               STIX 2.x - ???????????   Given the community that Aharon already supports and needs to support, it is really important that he be involved in the STIX 1.x work.  That is not to say that he is not also highly involved or a co-chair of STIX 2.x, but I feel he really needs to make sure that STIX 1.x does what it should.     In my mind it is also very important that chairs of working groups and sub-working groups have the time to actually spend on it.  We have way too much work to do to have partially committed leadership.    Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:42, Barnum, Sean D. < sbarnum@mitre.org > wrote:   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From:   Joep Gommers < joep@intelworks.com > Date:   Thursday, June 18, 2015 at 3:33 PM To:   Jordan, Bret < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc:   tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject:   Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From:   Jordan, Bret < bret.jordan@bluecoat.com > Date:   Thursday, June 18, 2015 at 9:26 PM To:   Aharon Chernin < achernin@soltra.com > Cc:   tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject:   Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org   < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.         I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables:   Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA       DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail


  • 21.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 23:31
    As in code streams, it's typically optimal to maintain the integrity of particular specification bases. In Oasis fashion ,a particular element (STIX, CYBOX, TAXII) may be treated as distinct work streams.  Within each, merge (STIX/CYBOX), bindings (XML, JSON, .or ..), or versions (1.3, 2.0, ++) can be addressed, managed, and completed.  In practice, multiple/parallel efforts within the element categories has not proven to be particularly effective. While we're all motivated to 'get on with it,' history suggests linearization of streams (STIX, TAXII, CYBOX) to be an effective means to advance each. Bindings (JSON, Xmas, ?) can be addressed in parallel. Cheers! ~r ron.williams@us.ibm.com stsm chief architect, infrastructure protection division idt lead ibm security systems mobile +1.512.633.7711 ofc +1.512.286.9254 It is much less dangerous to think like a man of action, than to act like a man of thought.  - Nicholas Nassim Taleb via iPhone On Jun 19, 2015, at 00:15, Jordan, Bret < bret.jordan@bluecoat.com > wrote: I was trying to just spell out exact what I read from Sean.  That we have one top level STIX working group, but then have sub-working groups (I think he called them work product efforts ) underneath.  And each (using his terminology) work product efforts would have their own leadership to drive it and make sure it gets done.   I just do not see the STIX 1.x work going away anytime in the next few years.  It will slow down, yes, but it is not going away. And we need a group of people that are committed to its success and making sure the investments made by people hold true.  The problem we have had over and over again on the old MITRE lists is discussions of future work and current work getting cross mixed and people getting all in a dither about the sky falling and the sun exploding.  I feel like if we keep them on separate lists, then it will be easy for people to discern what is being proposed and talked about.  Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On Jun 18, 2015, at 15:52, Bush, Jonathan < jbush@dtcc.com > wrote: Bret – I think your email below is the opposite of what Sean proposed, unless I’m reading it wrong.    From:   cti@lists.oasis-open.org   [ mailto:cti@lists.oasis-open.org ]   On Behalf Of   Jordan, Bret Sent:   Thursday, June 18, 2015 5:47 PM To:   Sean D. Barnum Cc:   Joep Gommers; Aharon Chernin;   tony@yaanatech.com ;   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   If we have one big STIX committee then I would want the structure underneath it to represents separate sub-working groups with their own leaders, deliverables. and own working spaces.  Can OASIS setup that kind of structure?  I want the working groups to be focused on what they are trying to do.  For example I could see a structure like:   STIX - Sean and ????? (maybe Joep or?? )               STIX 1.x - Someone from MITRE and Aharon               STIX 2.x - ???????????   Given the community that Aharon already supports and needs to support, it is really important that he be involved in the STIX 1.x work.  That is not to say that he is not also highly involved or a co-chair of STIX 2.x, but I feel he really needs to make sure that STIX 1.x does what it should.     In my mind it is also very important that chairs of working groups and sub-working groups have the time to actually spend on it.  We have way too much work to do to have partially committed leadership.    Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:42, Barnum, Sean D. < sbarnum@mitre.org > wrote:   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From:   Joep Gommers < joep@intelworks.com > Date:   Thursday, June 18, 2015 at 3:33 PM To:   Jordan, Bret < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc:   tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject:   Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From:   Jordan, Bret < bret.jordan@bluecoat.com > Date:   Thursday, June 18, 2015 at 9:26 PM To:   Aharon Chernin < achernin@soltra.com > Cc:   tony@yaanatech.com < tony@yaanatech.com >, mona.magathan@usbank.com < mona.magathan@usbank.com >, cti@lists.oasis-open.org < cti@lists.oasis-open.org > Subject:   Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org   < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ;   cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.         I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.     On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables:   Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA       DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email. <signature.asc>


  • 22.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-19-2015 20:24
    +1   From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Barnum, Sean D. Sent: 18 June, 2015 12:43 To: Joep Gommers; Jordan, Bret; Aharon Chernin Cc: tony@yaanatech.com; mona.magathan@usbank.com; cti@lists.oasis-open.org Subject: Re: [cti] STIX Subcommittee Nomination   So, the typical way of doing this would be to have a single STIX SC with multiple work product efforts (e.g. STIX 1.x & STIX 2.0) underway with different editors and contributors. This provides the coordination and communication Aharon describes as well as the separate focus that Bret, et al, describe. This is true of almost all SDOs and I think still meets the objectives you are all conveying here.   sean   From: Joep Gommers < joep@intelworks.com > Date: Thursday, June 18, 2015 at 3:33 PM To: "Jordan, Bret" < bret.jordan@bluecoat.com >, Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   I can also see some advantage with regards to focus. Separate work stream with separate cadence, leadership expertise, etc might be helpful. J-   From: "Jordan, Bret" < bret.jordan@bluecoat.com > Date: Thursday, June 18, 2015 at 9:26 PM To: Aharon Chernin < achernin@soltra.com > Cc: " tony@yaanatech.com " < tony@yaanatech.com >, " mona.magathan@usbank.com " < mona.magathan@usbank.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] STIX Subcommittee Nomination   The same people may be on both subcommittees.  By breaking them up this allows each subcommittee to focus on different things.  There are some people that will not care about STIX 1.3 and some that will not care about STIX 2.0   Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:23, Aharon Chernin < achernin@soltra.com > wrote:   I think a single STIX committee will ensure good communication between the folks working STIX 1.x and STIX 2.x. This may also improve interoperability between the two major releases.   Aharon Chernin CTO SOLTRA   An FS-ISAC & DTCC Company 18301 Bermuda green Dr Tampa, fl 33647 813.470.2173   achernin@soltra.com www.soltra.com From:   cti@lists.oasis-open.org < cti@lists.oasis-open.org > on behalf of Jordan, Bret < bret.jordan@bluecoat.com > Sent:   Thursday, June 18, 2015 3:20 PM To:   tony@yaanatech.com Cc:   mona.magathan@usbank.com ; cti@lists.oasis-open.org Subject:   Re: [cti] STIX Subcommittee Nomination   I am against the idea of creating a single STIX working group.  STIX 1.3 and STIX 2.0 are two totally different animals and we do not want to bog one down to work on the other.       I could see Aharon and Sean co-Chairing the STIX 1.3 sub committee.  I would be good with that.     Thanks,   Bret       Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."    On Jun 18, 2015, at 13:10, Tony Rutkowski < tony@yaanatech.com > wrote:   Yaana seconds the proposal On 2015-06-18 3:08 PM,   mona.magathan@usbank.com   wrote: Hi All,   I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs   The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language.   Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x   STIX Documentation   Regards,   Mona Magathan   Information Security Services       U.S. Bank   (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------     --   ________________________________   Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs   tony@yaanatech.com +1 703 999 8270 ________________________________   Yaana Technologies LLC     542 Gibraltar Drive   Milpitas CA 95035 USA    


  • 23.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:45
    I also feel Aharon and Sean co-Chairing the STIX 1.3 sub committee, are a great choice! Cindy  Sent from Outlook _____________________________ From: Tony Rutkowski < tony@yaanatech.com > Sent: Thursday, June 18, 2015 12:10 PM Subject: Re: [cti] STIX Subcommittee Nomination To: < mona.magathan@usbank.com >, < cti@lists.oasis-open.org > Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. --------------------------------------------------------------------- -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC 542 Gibraltar Drive Milpitas CA 95035 USA


  • 24.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:55
    Having a subcommittee for 1.3 and 2.0 both confuses me.  If they are truly as separate as the emails below are eluding too, there should be STIX and <insert new name here>.  I don’t think anyone wants that.  If for no other reason, we as a group risk sending out a dangerous message to the world (and to each other) – If STIX is THAT broken, why should anyone do anything other than STOP ALL DEVELOPMENT?  (Putting myself in the shoes of an executive or investor) If we are so fractured as a group, I’m taking my time and money somewhere else… call me when you all have something ready for primetime.   Again, let’s keep it simple.  One subcommittee – STIX.  In charge of the current and future direction of the spec.    From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Cynthia Camacho Sent: Thursday, June 18, 2015 3:45 PM To: mona.magathan@usbank.com; cti@lists.oasis-open.org; tony@yaanatech.com Subject: Re: [cti] STIX Subcommittee Nomination   I also feel Aharon and Sean co-Chairing the STIX 1.3 sub committee, are a great choice!   Cindy    Sent from Outlook   _____________________________ From: Tony Rutkowski < tony@yaanatech.com > Sent: Thursday, June 18, 2015 12:10 PM Subject: Re: [cti] STIX Subcommittee Nomination To: < mona.magathan@usbank.com >, < cti@lists.oasis-open.org > Yaana seconds the proposal On 2015-06-18 3:08 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------   -- ________________________________ Anthony Michael Rutkowski EVP, Industry Standards & Regulatory Affairs tony@yaanatech.com +1 703 999 8270 ________________________________ Yaana Technologies LLC 542 Gibraltar Drive Milpitas CA 95035 USA   DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 25.  RE: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:24
      |   view attached
    Seconding the proposal.   Chris Koutras Director, Critical Initiatives Technology Risk Management DTCC Tampa Direct: +1 813-470-2171 ckoutras@dtcc.com Mobile: +1 646-455-7460 Fax: +1 813-470-2900     Visit us at www.dtcc.com or follow us on Twitter @ The_DTCC  and on LinkedIn . To learn about career opportunities at DTCC, please visit dtcc.com/careers .   From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of mona.magathan@usbank.com Sent: Thursday, June 18, 2015 3:08 PM To: cti@lists.oasis-open.org Subject: [cti] STIX Subcommittee Nomination   Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation   Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. --------------------------------------------------------------------- DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses.  The company accepts no liability for any damage caused by any virus transmitted by this email.


  • 26.  Re: [cti] STIX Subcommittee Nomination

    Posted 06-18-2015 19:36
    Hi, y'all - I was hoping to avoid weighing into the subcommittee discussion until Friday as it's already rather late in Berlin but here goes... I move to create two technical subcommittees: representation and transport. I would like to see CybOX merged into STIX. To me it makes absolutely no sense maintaining them as separate standards. If we begin with separate STIX and CybOX committees, the raison d'etre of the CybOX committee is likely to become the maintenance of its own existence, human politics being what it is. (Pun intended.) We can always decide to keep STIX and CybOX separate and spin up dedicated subcommittees but I would like to see us start with one single representation subcommittee tasked with deciding whether merging the two taxonomies into one makes sense. Cheers, Trey -- Trey Darley Senior Security Engineer Soltra An FS-ISAC & DTCC Company www.soltra.com ++----------------------------------------------------------------------------++ Sent from my CRM-114 Discriminator On Jun 18, 2015 9:09 PM, mona.magathan@usbank.com wrote: Hi All, I am submitting a proposal to create a STIX subcommittee and nominate Aharon Chernin & Sean Barnum as co-chairs The STIX subcommittee will maintain and steer the future direction of the Structured Threat Information _expression_ language. Deliverables: Create a roadmap for STIX 1.x Maintain and enhance STIX 1.x as necessary Create a roadmap for STIX 2.x Design and create STIX 2.x STIX Documentation Regards, Mona Magathan Information Security Services   U.S. Bank (206) 225.7519 U.S. BANCORP made the following annotations --------------------------------------------------------------------- Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation. ---------------------------------------------------------------------