Global Security Database

 View Only
  • 1.  Discussion on future data formats

    Posted Dec 15, 2021 09:04:00 PM
    So I invented the JSON format used by MITRE/CVE (and for which I apologize, it's a terrible format and missing many things) which is at https://github.com/CVEProject/cve-schema/tree/master/schema.

    What do you want to see in a future data format?

    E.g. I want a data format that supports both machine-readable (JSON) and human-readable (e.g. formatted text), for example I sort of did this in the CVE JSON format, but for example the text description doesn't support any formatting, or even line returns. So I think in general the solution here is to figure out which fields are human-readable (the description for sure, notes fields as well?) and allow the use of line returns and Markdown.

    I also suspect taking some inspiration from JSON-LD (https://json-ld.org/) is a good idea but I don't think I fully understand it (so if you're using it, for e.g. events or products please let me know!)

    So what does the community need and want to see?

    ------------------------------
    Kurt Seifried
    Chief Blockchain Officer and Director of Special Projects
    Cloud Security Alliance
    [email protected]
    ------------------------------


  • 2.  RE: Discussion on future data formats

    Posted Dec 15, 2021 09:15:00 PM
    Oh also I forgot, I put some of my thoughts on GSD data format/requirements (in general) here: https://github.com/cloudsecurityalliance/gsd-project-plans/blob/main/data-formats/Thoughts-on-data-formats.md

    ------------------------------
    Kurt Seifried
    Chief Blockchain Officer and Director of Special Projects
    Cloud Security Alliance
    [email protected]
    ------------------------------