Re: [sacm] Discussion of remaining work items for the information model

"Adam W. Montville" <adam.w.montville@gmail.com> Tue, 21 July 2015 13:36 UTC

Return-Path: <adam.w.montville@gmail.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48A811B2DB1 for <sacm@ietfa.amsl.com>; Tue, 21 Jul 2015 06:36:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Level:
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QCT89Ky_BIkU for <sacm@ietfa.amsl.com>; Tue, 21 Jul 2015 06:36:36 -0700 (PDT)
Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EFB81B2D8E for <sacm@ietf.org>; Tue, 21 Jul 2015 06:36:35 -0700 (PDT)
Received: by wibud3 with SMTP id ud3so114497751wib.1 for <sacm@ietf.org>; Tue, 21 Jul 2015 06:36:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=xkMGLX+xmDtFAzut81jYVI/61+ZTumjFqPUSqZJ1JvQ=; b=rKgAT/GOcpEVG/5Fe7/cdxIygb4Rrtb7Lzu3xXbO6+qZB4b3G/SrAcs6k5DVJCCUxk y+HsU6K4up7RpcEUmCj4OjcwBGaG17NhmAud67YlXYPPYKlcsCjNd8JXFC4f0TEr9Eyy 8NtDaGBwZstl1dnwNTPDomb6msm4RU62PlIle3aqRepX5zAFNyxswYfMp/UpPx5vzEmf cr9WQW0UYiL2bNVKgJ6c7s2Jl2l+bnRuBEoOhpnwbGliF+k9PQihFxivCpFVwkoCQLSp sGyGXKAVQZFllM5dqENqOaC7qD4DuGUWYyJLgOqqI55MXOYse7CNcfL3SdM/1PmMm40R JgCQ==
X-Received: by 10.194.8.40 with SMTP id o8mr67882198wja.100.1437485794327; Tue, 21 Jul 2015 06:36:34 -0700 (PDT)
Received: from dhcp-88a7.meeting.ietf.org (dhcp-88a7.meeting.ietf.org. [31.133.136.167]) by smtp.gmail.com with ESMTPSA id u7sm16935255wif.3.2015.07.21.06.36.30 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 21 Jul 2015 06:36:33 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail=_08638D31-DC46-4914-8F62-893F9B19F863"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
From: "Adam W. Montville" <adam.w.montville@gmail.com>
In-Reply-To: <BLUPR09MB10494771D7BA987E421A9D8A5840@BLUPR09MB104.namprd09.prod.outlook.com>
Date: Tue, 21 Jul 2015 15:36:30 +0200
Message-Id: <B53B4D32-3876-40A3-9632-BE7BC6D009E8@gmail.com>
References: <BN1PR06MB437158035E756505197F993A8840@BN1PR06MB437.namprd06.prod.outlook.com> <BLUPR09MB10494771D7BA987E421A9D8A5840@BLUPR09MB104.namprd09.prod.outlook.com>
To: "Haynes, Dan" <dhaynes@mitre.org>
X-Mailer: Apple Mail (2.2102)
Archived-At: <http://mailarchive.ietf.org/arch/msg/sacm/NPrbg4qeLfeC6QLAkhMtdFb-MF8>
Cc: "sacm@ietf.org" <sacm@ietf.org>, Lisa Lorenzin <llorenzin@pulsesecure.net>
Subject: Re: [sacm] Discussion of remaining work items for the information model
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2015 13:36:38 -0000

A quick look at the (potentially out-of-date) table of contents may yield additional items.  Each of the following are under “SACM Information Model” at this point.

Identifying Attributes
Software Component
Software Instance
Hardware Component
Hardware Instance
Network Interface
Address
Identity
Location
Endpoint
Endpoint Attribute Assertion
Attribute-value Pair
Evaluation Result
Report
SACM Component
Organization
Guidance
Internal Collection
External Collection
Evaluation
Retention
Reporting
User


The bold-faced items are those that seem appropriate to ensure we’ve appropriately covered.

As a note, when it comes to Software Component/Instance we might find some commonality with what MILE is doing (their session tomorrow will include discussion about expressing SoftwareType, which seems to be a similar problem we’ll face).

Adam

> On Jul 21, 2015, at 2:40 PM, Haynes, Dan <dhaynes@mitre.org> wrote:
> 
> Hi Lisa,
> 
> One other area, off the top of my head, is that we need to work is on the sections related to guidance.  Specifically, collection and evaluation guidance, if we want to consider something like OVAL as a starting point for SACM.
> 
> Thanks,
> 
> Danny
> 
> -----Original Message-----
> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Lisa Lorenzin
> Sent: Tuesday, July 21, 2015 2:18 PM
> To: sacm@ietf.org
> Subject: [sacm] Discussion of remaining work items for the information model
> 
> Greetings!
> 
> During the information model update yesterday, the WG chairs asked that for a discussion of what work items remain outstanding towards completion of the information model.
> 
> To get us started, here's a first pass based topics raised during the update yesterday, 
> * finalize the list of identifying attributes
> * define the standard relationships between attributes
> * define the standard metadata required about attributes
> * add a section addressing SACM operations
> * review the draft for privacy implications and add a privacy considerations section
> 
> Plus a couple of additional thoughts
> * terminology review for consistency with terminology draft
> * address all the TODO comments/sections in the existing draft
> 
> What else?
> 
> 							Regards,
> 
> 								Lisa
> 
> 
> -- 
> Lisa Lorenzin    /    Principal Solutions Architect
> llorenzin@pulsesecure.net    /    919-384-7275
> 
> Pulse Secure    /    https://www.pulsesecure.net
> Facebook: https://www.facebook.com/pulsesecure1
> LinkedIn: https://www.linkedin.com/company/pulse-secure
> Twitter: https://twitter.com/PulseSecure1
> 
> 
> 
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm
> 
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm