Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document

Gunnar Engelbach <gunnar.engelbach@threatguard.com> Tue, 14 June 2016 19:53 UTC

Return-Path: <gunnar.engelbach@threatguard.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5AFC12D941 for <sacm@ietfa.amsl.com>; Tue, 14 Jun 2016 12:53:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJJVuHIsJqbA for <sacm@ietfa.amsl.com>; Tue, 14 Jun 2016 12:53:20 -0700 (PDT)
Received: from mail-pa0-x22a.google.com (mail-pa0-x22a.google.com [IPv6:2607:f8b0:400e:c03::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4CC912D942 for <sacm@ietf.org>; Tue, 14 Jun 2016 12:53:17 -0700 (PDT)
Received: by mail-pa0-x22a.google.com with SMTP id b13so212665pat.0 for <sacm@ietf.org>; Tue, 14 Jun 2016 12:53:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=iaRQxdqr1OA29WxvPGXe7AOFeFhxQtz40mp8OFN7Ie4=; b=uaQw08GJDSYRBfUFnOVyA2SZZtabaa6J7uhxNNN31ATXziiCXqY+B4bgFc/7OYNEnm bBAA/G3J4FYN39g6D+NqaiqGB9U3SVTBoVOFb229s7aWjBtEsO0e756k2o19aTUfcJUs U1WRk6Iy/zi2FNByhOhtcw1cuy0tWrINmdP+1wNV5S7epfqWJy1iWDeRNf99JgAADxmB ZmJSwMX6iGvpHBphSRRFR6EuNNiBWedCOcAjYqBOisonyEGof9iJ2Ma1NFSbbeT42DX1 DbA0C0ONtlkCLtXaI3F8Zu6aPbL7LeBnqPbJUbcJvLI4uINtjtY9d1irUsF3ble5QVBm ZsvQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=iaRQxdqr1OA29WxvPGXe7AOFeFhxQtz40mp8OFN7Ie4=; b=h2DmJd7Uj9LGEFSuNadIKaS9cpFGuMKF+PrRzW6CDkj2Vhcb1tOk/XgiKWNPIVJjN+ FO8GTLDfjMDh9T+pHBS9bCQD6TBp1Mywky36Xeuid/sfi1BLQ/1JPBNjJM58SVKxVw71 UugCThnS2YECm/qbMVhpCgZJP6CvqKYtYpoBuBzUhwu3/QrVDY5vx/buiBlP3HWQRwWA IsBde8XJ+dk5zcxVt2SiJMhYKDY8SQHBofuIZ9A3B8jr7/irZF7vXbTqTJV8nfjf/Ffj M0+dWdmh/09HH+DH5CQ733IBOnlyIczs4iHc4ADDP78EWR9Ar2OeuNa9MujS0SbsEW5s i3Fw==
X-Gm-Message-State: ALyK8tIWjvxxJxelG83TDBi96qmp2Razx5fAM2fsDGV+qjxZ0ax1wFUEYdVD2gRaGSzfYg==
X-Received: by 10.66.89.228 with SMTP id br4mr29649781pab.110.1465933997029; Tue, 14 Jun 2016 12:53:17 -0700 (PDT)
Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id i17sm47273565pfj.77.2016.06.14.12.53.15 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 14 Jun 2016 12:53:16 -0700 (PDT)
From: Gunnar Engelbach <gunnar.engelbach@threatguard.com>
X-Google-Original-From: Gunnar Engelbach <Gunnar.Engelbach@ThreatGuard.com>
To: "Schmidt, Charles M." <cmschmidt@mitre.org>, "tony@yaanatech.com" <tony@yaanatech.com>, Adam Montville <adam.w.montville@gmail.com>, "<sacm@ietf.org>" <sacm@ietf.org>
References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <EC234EFE-95AB-444B-8A5D-782ADBD60559@gmail.com> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <db612b00-c11a-88c1-45da-35e0693305e9@ThreatGuard.com> <SN1PR09MB0990FB5BD43F1E78C84CAD11AB540@SN1PR09MB0990.namprd09.prod.outlook.com>
Message-ID: <7c3e8459-9364-da92-3207-70cbd11d9f00@ThreatGuard.com>
Date: Tue, 14 Jun 2016 12:53:17 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <SN1PR09MB0990FB5BD43F1E78C84CAD11AB540@SN1PR09MB0990.namprd09.prod.outlook.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/9-ApwqoFvkwxREbZe06Oibt6TKs>
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Jun 2016 19:53:23 -0000

Yes, that's exactly what I had in mind.  Ideally there would be enough 
coverage right off the bat such that we don't have to do any extensions 
right away -- and the fewer down the road the better.

All three of these requirements are linked.  I would say that 
extensibility is primary, but that needs to be weighed against how easy 
it is to extend, which depends on the owning organization and might be 
offset by starting with a data model that is already very complete for 
our needs.  And so on.

The trickier part to start with is figuring out what we mean by 
complete.  What is that set of properties and data types that are core?  
I would prefer to build such a list by looking at usage -- current and 
desired.  A simpler approach would be to look at existing data models 
and flag things we think are important, but that can be self-fulfilling 
and insular.


--gun


On 6/14/2016 12:01 PM, Schmidt, Charles M. wrote:
> Hi Gunnar,
>
> Thanks for the suggestions. I agree with these requirements with a possible
> tweak on number 3: I would say that the data model needs to cover a
> sufficent "core", but probably does not need to explicitly cover every piece
> of information from every reasonable, providing that the extensibility
> features described in item 1 would allow that information to be captured.
> The end result is the same - the transmitted data can capture all
> information from whatever source is used without loss. The difference is
> that we only need to identify fields that are likely to be of common
> utility, and edge cases can naturally be taken care of through extensions.
>
> Does this seem reasonable?
>
> Charles
>
>> -----Original Message-----
>> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Gunnar Engelbach
>> Sent: Thursday, June 09, 2016 7:45 PM
>> To: tony@yaanatech.com; Adam Montville <adam.w.montville@gmail.com>;
>> <sacm@ietf.org> <sacm@ietf.org>
>> Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc
> as
>> a SACM WG document
>>
>>
>>
>> Hey Tony, funny thing that you should say that.  You seem to have a better
>> awareness of the other efforts going on out there than I do, so I could
> use
>> your help in identifying other good candidates and what will be necessary
> to
>> support as many of them as possible.
>>
>> What I'd really like to do is take a more formal approach -- gather some
>> requirements and then see from among the existing efforts which is the
> best
>> from among those that are good enough.  If any.
>>
>> But first is a matter of setting the requirements.  Stated generally, I
> really
>> only have three:
>>
>>    1)  Is extensible -- as a fork outside of the current owner, if
> necessary, to be
>> sure it continues to meet SACM needs without relying on the good graces of
>> the current owner
>>
>>    2)  Readily accessible (eg., spec is not cost prohibitive for any users)
>>
>>    3)  The most complete (that is, closest to being able to represent the
> other
>> tag types without loss of data or shoe-horning data into fields that
> weren't
>> really meant for that type of data)
>>
>>
>> I'm sure Charles, et al, will have other requirements, so feel free to
> chime in.
>> However, I think the simpler and more informal we can keep this list the
>> quicker we can grind through it.
>>
>>
>> --gun
>>
>>
>>
>>
>>
>> On 6/9/2016 2:33 PM, Tony Rutkowski wrote:
>>
>>
>> 	Hi Adam,
>>
>> 	A good solution.  Charles and Gunnar should also engage
>> 	in some proactive outreach.  Simply stating that "no other
>> 	solutions to the problem of software identification have
>> 	been submitted" is preposterous when there are so many
>> 	out there.  IMHO, one of the long-standing problems with
>> 	SACM is its institutional and participatory insularity in an
>> 	arena where so many almost identical activities are occurring
>> 	in other venues where there is far greater industry participation.
>> 	Ignoring them diminishes the value of whatever SACM
>> 	accomplishes.
>>
>> 	--tony
>>
>>
>> 	On 2016-06-09 3:47 PM, Adam Montville wrote:
>>
>>
>> 		All:
>>
>> 		After several on-list discussions, the last virtual interim,
> and
>> the discussions surrounding this call for adoption, the chairs acknowledge
>> that there are some key concerns with this draft, but also see that there
> is
>> rough consensus for adoption.  We additionally note that no other
> solutions
>> to the problem of software identification have been submitted to the
>> working group [1].
>>
>> 		Because the topic of software identification, and SWID in
>> particular, appears to be a contentious one, we are designating Charles
>> Schmidt and Gunnar Engelbach as editors of the working group draft [2].
> We
>> believe that Charles and Gunnar will bring the necessary balance to this
> draft,
>> so that the key concerns are sufficiently addressed.
>>
>> 		Kind regards,
>>
>> 		Adam & Karen
>>
>> 		[1] This draft adoption does not preclude future alternative
>> submissions
>> 		[2] Note that original authors will remain authors, but
> Charles
>> and Gunnar will hold the pen.
>>
>>
>>
>> 			On May 17, 2016, at 11:21 AM, Karen O'Donoghue
>> <odonoghue@isoc.org <mailto:odonoghue@isoc.org> > wrote:
>>
>> 			Folks,
>>
>> 			As discussed during our last couple of meetings,
> this
>> is the official call for adoption of
> <https://datatracker.ietf.org/doc/draft-
>> coffin-sacm-nea-swid-patnc/>
> https://datatracker.ietf.org/doc/draft-coffin-
>> sacm-nea-swid-patnc/ as a SACM working group document.
>>
>> 			Please reply with any comments or concerns along
>> your support of this action to the mailing list.
>>
>> 			Thanks,
>> 			Karen and Adam
>>
>> 	_______________________________________________
>> 			sacm mailing list
>> 			sacm@ietf.org <mailto:sacm@ietf.org>
>> 			https://www.ietf.org/mailman/listinfo/sacm
>>
>>
>>
>>
>>
>>
>>
>> 	_______________________________________________
>> 		sacm mailing list
>> 		sacm@ietf.org <mailto:sacm@ietf.org>
>> 		https://www.ietf.org/mailman/listinfo/sacm
>>
>>
>>
>>
>>
>> 	_______________________________________________
>> 	sacm mailing list
>> 	sacm@ietf.org <mailto:sacm@ietf.org>
>> 	https://www.ietf.org/mailman/listinfo/sacm
>>