Skip to content

Adding the STIX 2.1 Processor Architectures to vocabs.ttl #86

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

brett-heffelfinger
Copy link
Contributor

Closes #43

Added gist:ProcessorArchitecture and associated processor architectures from STIX 2.1 to vocabs.ttl.

Specific question for review: On line 1756 and 1791, for ia64 and x8664, should there be a hyphen in the URI like ia-64 and x86-64 instead?

@brett-heffelfinger brett-heffelfinger linked an issue May 23, 2025 that may be closed by this pull request
@brett-heffelfinger brett-heffelfinger self-assigned this May 23, 2025
@rhohimer
Copy link
Collaborator

Most of these vocabularies in gistCyber are in support of the STIX 2.1 vocabularies. The STIX 2.1 approach is to tag things with a string. In the SPARQL-Anything template used to ingest STIX 2.1 JSON objects we use the value of the tag to type the instances being ingested. This implementation does support ingesting in this way, because the IRI is created using the exact tag.

You ( @brett-heffelfinger ) have used the skos:prefLabel to represent a more humanly readable and pleasant form. Which is a good convention.

A problem we will have in the future comes when we want to WRITE out STIX 2.1 JSON. It is convenient to have the tag value ready at hand. I set the skos:prefLabel to the exact tag value. Some discussion and decision should be made about this. @uscholdm has been guiding me on this topic. I think we should request his wisdom.

It could be that we use skos:altLabel or a new predicate to capture the tag value on these STIX concepts with vocabulary tags.

@brett-heffelfinger
Copy link
Contributor Author

A problem we will have in the future comes when we want to WRITE out STIX 2.1 JSON. It is convenient to have the tag value ready at hand. I set the skos:prefLabel to the exact tag value. Some discussion and decision should be made about this. @uscholdm has been guiding me on this topic. I think we should request his wisdom.

It could be that we use skos:altLabel or a new predicate to capture the tag value on these STIX concepts with vocabulary tags.

Would it make sense to have a proper property instead of an altLabel, in the potential event of having multiple altLabels for a particular vocab element? Something like gist:STIX_JSON_Tag or whatever the proper convention would be?

@rhohimer
Copy link
Collaborator

rhohimer commented May 27, 2025 via email

@brett-heffelfinger
Copy link
Contributor Author

Sure, gist:stix-term sounds good. I'll implement it for this set of properties, then we can decide if we like how it looks for the rest.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement the STIX 2.1 Processor Architecture vocabulary
2 participants