Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation

To: "Nandakumaraiah, Chandan" <cbn@juniper.net>
Subject: Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
From: Kurt Seifried <kseifried@redhat.com>
Date: Tue, 13 Mar 2018 17:13:27 -0400
Authentication-results: spf=none (sender IP is 192.52.194.235) smtp.mailfrom=LISTS.MITRE.ORG; imc.mitre.org; dkim=none (message not signed) header.d=none;imc.mitre.org; dmarc=fail action=none header.from=redhat.com;
Cc: "Seifried, Kurt" <kurt@seifried.org>, cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>, cve-board-auto-list <cve-board-auto-list@lists.mitre.org>
Delivery-date: Tue Mar 13 19:44:44 2018
In-reply-to: <d238dd43-ca9f-437f-6863-9a1118e014c3@juniper.net>
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <SN1PR09MB07360F2095982406AE646F42B6C60@SN1PR09MB0736.namprd09.prod.outlook.com> <CANO=Ty2wSDOkzgnGZVzxvuOohYn+sFUx=UhbxKNPgBr_0Zh9YQ@mail.gmail.com> <274d2f03-97b5-e834-9952-7351037eac02@juniper.net> <CANO=Ty1g4JnkLvUEgt3LvmGZo+UfCd3n3bcVhtgj7GziQqS8Yw@mail.gmail.com> <1d30a540-1a69-4385-39ee-5449cf8f9cf9@juniper.net> <edfe754d-5a6d-35b5-5002-591ce21019f8@juniper.net> <CABqVa3-jV9MAC2N_YhcQE=1XiVYXQG=PhE6xJV6-8SAq2b2nPw@mail.gmail.com> <d238dd43-ca9f-437f-6863-9a1118e014c3@juniper.net>
Sender: "owner-cve-editorial-board-list@lists.mitre.org" <owner-cve-editorial-board-list@lists.mitre.org>
Thread-index: AdOxW/wrcf67jZi8SRaj1ItS8Zj/mQADkMaAAEO9dE8CI17TGwACYjHQ
Thread-topic: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation

That (and many other reasons) is exactly why I'm going to go talk to them.

https://github.com/grafeas/grafeas/issues/113

On Tue, Mar 13, 2018 at 2:58 PM, Chandan Nandakumaraiah <cbn@juniper.net> wrote:

On 3/13/18 1:04 PM, Kurt Seifried wrote:
> So I just learned about grafeas (did a podcast with Chris Rosen as
> guest), anyways TL;DR: they are basically doing similar things with JSON
> including something that is very similar to the alias field I proposed:
>
> https://github.com/grafeas/grafeas
...
> So the above is similar in that you have a defined namespace and then
> some value.

How are they solving the problem of identifying namespaces?
Who creates, assigns or manages namespaces?

Thanks,
-Chandan
--
Security Incident Response Team
Juniper Networks

Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com

Follow-Ups:
- Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
  - From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>

References:
- Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
  - From: "Theall, George A" <gtheall@mitre.org>
- Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
  - From: Kurt Seifried <kseifried@redhat.com>
- Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
  - From: Kurt Seifried <kseifried@redhat.com>
- Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
  - From: Kurt Seifried <kurt@seifried.org>

Prev by Date: Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
Next by Date: Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
Previous by thread: Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
Next by thread: Re: Notice of Pilot Activity in CVE Auto WG - Supporting NVD's Participation
Index(es):
- Date
- Thread