Skip to content

Work Product: STIX 1.2.1 Specification

sbarnum edited this page Aug 21, 2015 · 9 revisions

STIX 1.2.1 Specification Work Product Homepage This is the landing page for information related to the STIX 1.2.1 Specification Work Product. This page is intended to be an index into the latest information and resources, so please bookmark it if you are interested in STIX!

If you'd like to contribute to the conversation, please join the OASIS CTI TC.

Co-Chairs Sean Barnum ([email protected]) and Aharon Chernin ([email protected]) are the co-chairs of the STIX Subcommittee.

Current Status The STIX Subcommittee (SC) is currently in the process of migrating and transforming the content of the pre-OASIS STIX v1.2 specification documents over into the OASIS specification document templates to form STIX v1.2.1. The set of documents making up the multi-part STIX 1.2.1 specification are:

  • STIX Version 1.2.1 Part 1: Overview. [URI]
  • STIX Version 1.2.1 Part 2: Common. [URI]
  • STIX Version 1.2.1 Part 3: Core. [URI]
  • STIX Version 1.2.1 Part 4: Indicator. [URI]
  • STIX Version 1.2.1 Part 5: TTP. [URI]
  • STIX Version 1.2.1 Part 6: Incident. [URI]
  • STIX Version 1.2.1 Part 7: Threat Actor. [URI]
  • STIX Version 1.2.1 Part 8: Campaign. [URI]
  • STIX Version 1.2.1 Part 9: Course of Action. [URI]
  • STIX Version 1.2.1 Part 10: Exploit Target. [URI]
  • STIX Version 1.2.1 Part 11: Report. [URI]
  • STIX Version 1.2.1 Part 12: Extensions. [URI]
  • STIX Version 1.2.1 Part 13: Data Marking. [URI]
  • STIX Version 1.2.1 Part 14: Vocabularies. [URI]
  • STIX Version 1.2.1 Part 15: UML Model. [URI]

Estimated future timeline

  • It is estimated that all existing documents should be completely migrated to OASIS drafts sometime Aug 28 – Sep 4
  • Once the drafts are completed they will be posted to the STIXProject/specifications repository and the SC members will have 1 week to review before recommending them to the TC for consideration as a Committee Specification Public Review Draft. The short review window is due to the fact that the 1.2.1 version of the specs should have no substantive structural or semantic changes from the 1.2 version. ** At this point in the process, the STIX SC plans to initiate formal kickoff of the STIX 2.0 work product
  • Once at the TC level, it is expected that it will be rapidly issued as a Committee Specification Public Review Draft with the requisite minimal public comment window of 30 days.
  • Once the public comment period is ended and all comments disposed of (due to the defined scope of the 1.2.1 release it is expected that any changes due to comments will be non-material in nature) the TC will move as quickly as possible to call for a TC Special Majority Vote to approve the documents as a Committee Specification.

Feedback The best way to provide feedback on STIX, TAXII, or CybOX is to join the OASIS CTI TC.

The second best way to provide feedback at a user/implementer level on STIX, TAXII, or CybOX is to send an email to [email protected].

Resources OASIS CTI Wiki: https://wiki.oasis-open.org/cti/ TAXII portion of the wiki: https://wiki.oasis-open.org/cti/taxii Related Work and Related Reading This is a list of related work, in no particular order. If you see something missing, please let us know and we'll add it.

Related Work

Related Reading

Clone this wiki locally