[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-cybox] CybOX 3.0: File Object Refactoring
My preference would be to have a single, unambiguous way of identifying file type, so I think it would make the most sense to have just MIMEType and deprecate existing similar fields that may conflict when used in an instance, such as magic_number.
I think making ‘is_directory’ required is reasonable – I’ll be sure to add this in the next round of updates to the proposal.
Regards,
Ivan
From: Paul Patrick <ppatrick@isightpartners.com>
Date: Tuesday, December 15, 2015 at 8:37 AM To: Ivan Kirillov <ikirillov@mitre.org>, John Anderson <janderson@soltra.com>, Jerome Athias <athiasjerome@gmail.com> Cc: Jason Keirstead <Jason.Keirstead@ca.ibm.com>, Bret Jordan <bret.jordan@bluecoat.com>, "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>, Terry MacDonald <terry@soltra.com> Subject: Re: [cti-cybox] CybOX 3.0: File Object Refactoring With regards to the use of MIMEType, I’d agree that its better than using ‘content_type’. Is it envisioned that this would be used to replace today’s FileOjb:magic_number or in addition? The problem with using both is that they create an opportunity
to be in conflict.
While my preference would be for a Directory object, I could get behind the later proposal as its makes it explicit rather than left for someone to infer whether its actually a file or whether its just not supplied. With that said, I would recommend that
we make ‘is_directory’ mandatory so that we avoid this confusion and make it explicit
Paul
From: Ivan Kirillov <ikirillov@mitre.org>
Date: Tuesday, December 15, 2015 at 10:23 AM To: John Anderson <janderson@soltra.com>, Jerome Athias <athiasjerome@gmail.com>, Paul Patrick <ppatrick@isightpartners.com> Cc: Jason Keirstead <Jason.Keirstead@ca.ibm.com>, "Jordan, Bret" <bret.jordan@bluecoat.com>, "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>, Terry MacDonald <terry@soltra.com> Subject: Re: [cti-cybox] CybOX 3.0: File Object Refactoring
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]