Re: [cti-cybox] CybOX 3.0 Roadmap

[Jerome Athias <athiasjerome@gmail.com>]

Thank you very much Trey.
For sure, happy to help.
Identifying the domains where each CybOX objects can be used is for
sure helpful.
(and we spoke in the past about tagging the objects with domains, and
i did not find the time to do it effectively, sorry)
(the domains or tags would help to create 'views', like views in
CAPEC/CWE if you're familiar with this)

Your approach is fine, and again, happy to help.
So while doing basically the same thing, i was trying at the same time
to represents the 'hierarchy' between the objects.
The relationships are identified:
https://cyboxproject.github.io/documentation/object-relationships/
A simple visual example would be:

Process
File
Archive File

(maybe there are too many use cases, not sure now)
I will investigate if graphviz would support what i would like to do

PS: thanks, again, for your efforts guys



2015-10-29 12:29 GMT+03:00 Trey Darley <trey@soltra.com>:
> On 29.10.2015 09:40:13, Jerome Athias wrote:
>>
>> That just reminded me that i started to work on some diagrams to
>> represents CybOX objects (and their relationships...) in a
>> 'conceptual way' (i.e. to highlight what is conceptual, or physical,
>> or what relates to filesystem, memory, etc.). Just sharing a
>> OmniGraffle first draft to see if it's something interesting to work
>> on further in a a collaborative manner.
>>
>
> Hi, Jerome -
>
> Unfortunately I don't have a copy of OmniGraffle, so I can't view your
> attachment, but from how you describe your analysis it sounds like the
> work Ivan and I have been doing in Graphviz. I guess you didn't make
> the 24.09.2015 CybOX SC call where we presented that work. Here's the
> slidedeck [0]. Cf. slides 09-13.
>
> You're definitely on the right track but we should align our efforts
> to avoid duplication of effort.
>
> I need to double-check with Ivan but the best approach would probably
> be to drop the latest Graphviz files into Github so we can all
> collaborate on this analysis.
>
>
> [0]: https://www.oasis-open.org/apps/org/workgroup/cti-cybox/download.php/56556/OASIS%20CTI%20CybOX%20SC%20Meeting%20-%20September%2024%202015%20v2.pptx
>
> --
> Cheers,
> Trey
> --
> Trey Darley
> Senior Security Engineer
> 4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
> Soltra | An FS-ISAC & DTCC Company
> www.soltra.com
> --
> "In protocol design, perfection has been reached not when there is
> nothing left to add, but when there is nothing left to take away."
> --RFC 1925