Re: [cti] RE: Timestamps and Temporal Intervals

["Barnum, Sean D." <sbarnum@mitre.org>]

I would concur with Patrick that these things should be treated as separate issues and with Terry that the temporal interval issue should wait until after we finish with the absolute timestamp issue.

On Jason’s response on some temporal windowing discussions that happened at the F2f around patterning I would suggest that temporal windowing for patterns and temporal windowing for actual concrete times may also be two different issues. I am not making a hard assertion at this time that they are but I think this question should be one of the first broached when we do actually pick up the temporal windowing issue.

sean

From: <cti@lists.oasis-open.org> on behalf of Terry MacDonald <terry@soltra.com>
Date: Monday, January 18, 2016 at 7:29 PM
To: Patrick Maroney <Pmaroney@Specere.org>, "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
Subject: [cti] RE: Timestamps and Temporal Intervals

Hi Pat,

 

Lets wait on temporal intervals until after the timestamps discussion is finished.

 

Cheers

 

Terry MacDonald

Senior STIX Subject Matter Expert

SOLTRA | An FS-ISAC and DTCC Company

+61 (407) 203 206 | terry@soltra.com

 

 

From: cti@lists.oasis-open.org [mailto:cti@lists.oasis-open.org] On Behalf Of Patrick Maroney
Sent: Tuesday, 19 January 2016 4:04 AM
To: cti@lists.oasis-open.org
Subject: [cti] Timestamps and Temporal Intervals

 

I want to help drive closure on Timestamps and breach the topic of Temporal Intervals* for the next major version. 

 

I posit there are two distinct temporal aspects to the _expression_ of "things" and their relationships to other "things" in the CTI Domain.  

 

(1) Absolute:  "Event x"  happened at absolute Time "T1".

 

(2) Relative Intervals:  "Event x" happened "Relative To(Rn**)" "Event y" [at relative interval "Interval In"] 

 **Where Rn = [Before, During, After,  At_Start_Of, At_End_Of, ...]

 

Therefore, we need to represent these temporal concepts in different forms (breaking the "One way to do Things" rule on the basis that these are two different "Things").

 

I believe we are very close to reaching consensus on Absolute Timestamps.  I propose that we should specifically identify and treat Temporal Intervals as a separate requirement and topic for discussion somewhere in the Road Map.  (IF there is consensus:  perhaps as part of Relationships and/or Patterning???)

 

 

* To set the framework for what is meant by "Temporal Intervals",  and some approaches one can consider in their representation, I refer everyone to James Allen's seminal paper from 1983:

 

http://cse.unl.edu/~choueiry/Documents/Allen-CACM1983.pdf

 

 

Patrick Maroney

Office:  (856)983-0001

Cell:      (609)841-5104

 

 

President

Integrated Networking Technologies, Inc.

PO Box 569

Marlton, NJ 08053