[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CVE-CNA JSON Format Proposal

To: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>, "Coffin, Chris" <ccoffin@mitre.org>, Kurt Seifried <kurt@seifried.org>
Subject: Re: CVE-CNA JSON Format Proposal
From: Art Manion <amanion@cert.org>
Date: Mon, 3 Apr 2017 16:28:05 -0400
Authentication-results: spf=none (sender IP is 129.83.29.3) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=cert.org;
Cc: "Booth, Harold (Fed)" <harold.booth@nist.gov>, cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>, "Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>, cve-board-auto-list <cve-board-auto-list@lists.mitre.org>
Delivery-date: Tue Apr 4 09:29:43 2017
In-reply-to: <MWHPR09MB1440D295EFDD2AAFD0C3F353F0320@MWHPR09MB1440.namprd09.prod.outlook.com>
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <CY4PR09MB1255F37BD20E03336BDE025AE63D0@CY4PR09MB1255.namprd09.prod.outlook.com> <e8f6e4e4-080d-14ce-998a-3b9bccaec013@cert.org> <CABqVa38X1wKQyRJYUOsg0pDR9++QT_-6SZig6nGqND6uw9gQ2Q@mail.gmail.com> <8120ae8d-d9e6-cb66-ffe0-372f34c44ddf@cert.org> <CABqVa3_2N5=XGK12C3pgBgnqTdUnZJ72+s06mXJHD0Ke5O8JCQ@mail.gmail.com> <MWHPR09MB14856D1A82B27AA9D98F9A00A1330@MWHPR09MB1485.namprd09.prod.outlook.com> <6fdc1a2f-7fec-a85d-0308-65540055decf@cert.org> <MWHPR09MB1440D295EFDD2AAFD0C3F353F0320@MWHPR09MB1440.namprd09.prod.outlook.com>
Sender: "owner-cve-editorial-board-list@lists.mitre.org" <owner-cve-editorial-board-list@lists.mitre.org>
Thread-index: AdKiRi2B7kRx+mQ9RUypWCI5bCW8bQA909WAAAFbDAAAAHrKAAAAlNyAAPnqFFAAKPlvAAAApCwwATjhgYA=
Thread-topic: CVE-CNA JSON Format Proposal
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.8.0

On 3/28/17 11:17 AM, Waltermire, David A. (Fed) wrote:

>> In a more distributed CVE world, I envision CNAs publishing CVE JSON (...over
>> a standard transport like RSS/Atom...) and users choosing which feeds to
>> consume. MITRE and any other aggregators could consume all the CNA
>> feeds, hopefully automating that part of the process.
>
> We have been working in the IETF on a profile of ATOMPub called ROLIE
> to support this type of use case. The specification draft is nearing
> publication, so now is a good time to get more review.
>
> The draft can be found here:
> https://datatracker.ietf.org/doc/html/draft-ietf-mile-rolie. Comments
> should be sent to the IETF MILE mailing list (mailto:mile@ietf.org).
>
> Stephen and I have plans to define a ROLIE extension to address the
> vulnerability information type. We would welcome collaborators from
> the CVE board to help us on creating this draft. Please let me know
> if you're interested.

I'd suggest this as an item for the automation group to take up.

- Art

Prev by Date: Re: CVE-CNA JSON Format Proposal
Next by Date: CVE Board Meeting Minutes - 22 March 2017
Previous by thread: Re: CVE-CNA JSON Format Proposal
Next by thread: CVE Board Meeting Minutes - 22 March 2017
Index(es):
- Date
- Thread