RE: [cti-stix] Deterministic IDs - pas de deux

["Taylor, Marlon" <Marlon.Taylor@hq.dhs.gov>]

Hi Trey,

Sorry for the delay.  The ^ of Math...got it!

My last question is: does the TC want to support the ability of having multiple TLOs with the same data being addressed by different identifiers? The ballot will have the answer.

Thanks for the clarity,

-Marlon

-----Original Message-----
From: Trey Darley [mailto:trey@soltra.com] 
Sent: Wednesday, May 11, 2016 5:54 AM
To: Taylor, Marlon
Cc: Wunder, John A.; Foley, Alexander - GIS; Jordan, Bret; cti-stix@lists.oasis-open.org
Subject: Re: [cti-stix] Deterministic IDs - pas de deux

On 10.05.2016 18:02:36, Taylor, Marlon wrote:
> What enforces the UUIDv4 that "identifies" Object A is not used to 
> identify Object B?
> 

Hey, Marlon -

It's enforced by math. According to Wikipedia [0], the probability of a UUIDv4 collision is approximately 0.00000000006. In other words, "only after generating 1 billion UUIDs every second for the next 100 years, the probability of creating just one duplicate would be about 50%." [0].

Add to that the namespace prefix and the probability of a collision decreases dramatically.

[0]: https://en.wikipedia.org/wiki/Universally_unique_identifier#Random_UUID_probability_of_duplicates

--
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430 Soltra | An FS-ISAC & DTCC Company www.soltra.com
--
"One size never fits all." --RFC 1925