Dear OASIS Staff Contact Kelly Cullinane,
I hope this message finds you well.
On behalf of the CISSAN project consortium, we are contacting you regarding an implementation observation relevant to the CTI STIX Subcommittee. We attempted to use the published contact route via cti-comment-subscribe@lists.
oasis-open.org, but this has not been available to us, nor is it currently possible to register as a community member to access additional OASIS resources. We are therefore contacting you directly to communicate this implementation observation.
Within CISSAN, selected platform outputs are transformed into STIX 2.1 bundles for exchange in machine-readable cyber threat intelligence workflows. In doing so, we identified a recurring modelling gap related to computational trust assessments.
We would like to make the Committee aware that, in our implementation, there is a practical need to represent trust assessments as first-class structured intelligence objects. Our view is that this need may grow as zero-trust architectures, automated sharing pipelines, and AI-assisted analysis continue to mature. If similar use cases emerge elsewhere, a more standardized modelling approach could become important for interoperability and efficient automation.
We are not submitting a formal specification proposal at this stage. Rather, we inform the Committee that this requirement has arisen in practice, and that we believe computational trust may be a candidate area for future consideration if broader community demand appears.
To address this in our prototype, we defined a custom SDO tentatively named Trust Score, with the properties:
| Property Category | Properties |
| Required Common Properties | type, spec_version, id, created, modified |
| Optional Common Properties | created_by_ref, revoked, labels, confidence, external_references, object_marking_refs, granular_markings, lang |
| Not Applicable Common Properties | hashes, extensions, first_observed, last_observed, count, defanged |
| Trust Score Specific Properties | target_ref, score_value, score_threshold, is_below_threshold, calculation_method, basis_refs, explanation |
Thank you for your time and consideration.
Best regards,
Veikko Markkanen JYU