Wrap JSON representation of OpenC2 in STIX XML schema

[jyoverma]

-----Original Message-----
From: Kemp, David P
Sent: Wednesday, June 15, 2016 10:51 AM
To: Brule, Joseph M
Cc: Kemp, David P
Subject: RE: Touching base on OpenC2 STIX COA

The STIX COA page (Sourabh posted the URL in the chat window of
yesterday's meeting, but Googling stix coa also works) lists a
StructuredCOAType field, which can be a GenericStructuredCOAType, which
has a Specification field that "encapsulates any test [sic] mechnism
[sic] specification in its native format within a string field. The
specification should be within a CDATA construct within the string
field".

So it is technically possible to include JSON text within the generic
Specification field. Whether any implementations support generic
Specifications is another question.

Dave

[jyoverma]

The subgroup has decided to support OpenC2 in STIX 2.0 where JSON is an MTI (Mandatory to implement) encoding so this issue pertaining to XML schema can be closed.