[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] Proposal - Top Level Relationship Object
A few thoughts:
Seems like we're all pretty close to the same page here though!
John
From: Terry MacDonald
Date: Tuesday, July 28, 2015 at 8:20 PM To: "Jordan, Bret" Cc: Aharon Chernin, Ivan Kirillov, "Wunder, John A.", JG on CTI-TC, Chris O'Brien, "cti-stix@lists.oasis-open.org" Subject: Re: [cti-stix] Proposal - Top Level Relationship Object All,
Two things:
1) If we force ID's to be tied to the domain name then we do not require a producer field, as we can work it out from the namespace of the ID. We can then also work out the location of the producer of the source object from the Source_ID, and the producer
of the target object from the Target_ID, meaning the producer information wouldn't be required. If the consumer required more information about the target or destination objects and they don't have them then they can do subsequent requests for the objects
to the producer directly. We wouldn't require a separate producer field as it would be inherent in the namespace.
Hence why I'm a fan of moving away from IDs being QNames and moving to URIs, and forcing people to only publish under their domain name namespace.
2) The relationships do not need a bi-directional flag in my opinion. Searches should be able to be accomplished without needing a relationship to be one way or the other. We shouldn't require a direction to enable a relationship to
be traversed as it just makes things more complicated. I like the way neo4j does things - where queries can use this relationship (a)-->(b) or this relationship (a)<--(b) or this relationship (a)--(b) and it will still walk the graph correctly. We just need
our relationships to be 'named' well.
And here is my take on a structure, based on everyone else's comments:
Notes:
Comments?
Cheers
Terry MacDonald | STIX, TAXII, CybOX Consultant Disclaimer: The opinions expressed within this email do not represent the sentiment of any other party except my own. My views do not necessarily reflect those
of my employers.
On 29 July 2015 at 07:24, Jordan, Bret <bret.jordan@bluecoat.com> wrote:
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]