search

CybOXProject / schemas

CybOX Schemas and Schema Development
42 stars 17 forks source link

Add Alternative_IDs to ObservableType #386

Open johnwunder opened 8 years ago

johnwunder commented 8 years ago

This would serve the same purpose as Alternative_ID on Incident and External_ID on Incident.

(suggested by someone who wanted to remain anonymous)

johnwunder commented 8 years ago

Personally, would suggest normalizing this field and including it across all top-level STIX and CybOX constructs. See STIXProject/schemas#358

athiasjerome commented 8 years ago

I suggest reviewing 8.3 Conceptual Threat Risk Model::Core Concept Library::Identifiers (Page 40) of http://www.threatrisk.org/spec/RevisedSubmission/Revised%20Operational%20Threat%20Risk%20Submission.pdf