Skip to content

Controlled Vocabulary Fixes

Jump to bottom Edit New page
bschmoker edited this page Dec 18, 2014 · 8 revisions
  • Status: Open
  • Closes: January 5, 2015

Proposal

Modify the Detection vocabulary to rename two entries with a name collision. A new incremental DiscoverMethodVocab and Enum version will be created for this purpose. This may require client-side changes if these entries were referenced strictly by name.

Currently a user who wants to encode fraud behavior detected using internal controls would use: <Behavior><Discovery_Method>Fraud Detection

  • This conflicts with another entry with the same name.

Proposed changes <Behavior><Discovery_Method>Internal - Fraud Detection

  • Now there is a distinction between Internal - and External -

Additionally, a minor change will remove spurious duplicates from the Asset default vocabulary. This should not require client-side changes since the values were exact duplicates.

Feedback

Feedback can be sent to the public STIX discussion list (make sure to join first) or sent privately to the core STIX team at stix@mitre.org.

Add a custom footer
Add a custom sidebar
Clone this wiki locally