Re: [sacm] Hackathon Goals and Stretch Goals

[Adam Montville <[e-mail]>]

All:

This week Dave and I have had an opportunity to discuss these a bit
further. We've come up with the following set of goals and outcomes:

GOAL: Running code demonstrating the communication needs between identified
components as they pertain to the on-request collection case through the
scenario, where that case is described at
https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario.
OUTCOME: We will have specific understanding of components' boundaries and
the necessary information flows (including information being communicated)
between them.

GOAL: Leverage existing collected data in a data repository. OUTCOME:
Demonstrate that previously collected data can be reused to support
vulnerability assessment

GOAL: Running code to extend that base case to include a mechanism capable
of monitoring a given set of endpoint attributes for change. OUTCOME: We
will have specific understanding of additional architectural considerations
for handling monitoring vs. on-request collection, as well as any
additional information flows required.

Does anyone care to bash these goal-ouctome pairs in the context of our
hackathon plans?  If so, please do so over the next day or two, otherwise
these will become the stated goals for our hackathon.

Kind regards,

Adam

On Tue, May 2, 2017 at 4:40 PM Adam Montville <[e-mail]>
wrote:

> All:
>
> Last week Dave sent a list of milestones to the list. The first of which
> was for the WG to define some goals for the IETF 99 hackathon. I can see at
> least one primary goal with at least one stretch goal. The primary goal is
> to have running code demonstrating the basic/ideal case through our
> vulnerability scenario, where a new vulnerability is discovered and we need
> to reach out all the way to the endpoint to determine whether it is in fact
> vulnerable. A stretch goal might be to have running code demonstrating a
> "monitor for this vulnerability from now on" capability (I'm sure I'm not
> stating that as well as I could).
>
> Does anyone have additional goals? Or, are there better ways to state
> these particular goals (there probably are)?
>
> Kind regards,
>
> Adam
>