From nobody Sun Apr 2 19:58:31 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36CB5127078 for ; Sun, 2 Apr 2017 19:58:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.52 X-Spam-Level: X-Spam-Status: No, score=-6.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yf32nrPnw0h3 for ; Sun, 2 Apr 2017 19:58:27 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BBEB126C25 for ; Sun, 2 Apr 2017 19:58:27 -0700 (PDT) Date: Sun, 02 Apr 2017 19:58:26 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491188306; bh=EUmUCqQQYK1CZgmihBSmHRCUf3FS3k7FEWoxuRXIvvQ=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=HZyGBc9mUVw14078nk1QB0BRvhsPsTmPscXORSdaKWjigO+ifB62SFuzmsjJdPhHo pNp36QTBXTxMnBHDrgoP7/sS7/Tr1shRaV5VbSB3VvvnAtZeoE4DwjdpLq17ryA13c gX9ppS0n0YnyCJY77M8DpHpFA0Y5KEREz0630krk= From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e1ba5254595_6db93fc99b27bc2c13957c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 02:58:29 -0000 ----==_mimepart_58e1ba5254595_6db93fc99b27bc2c13957c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Do not merge as this is a work in progress Changes to build the XML file from a CSV file for better looking item. You can view, comment on, or merge this pull request online at: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77 -- Commit Summary -- * Merge remote-tracking branch 'refs/remotes/sacmwg/master' * Start to use a python script for generation -- File Changes -- M .travis.yml (19) M Makefile (12) M check/check.py (10) A check/generate.py (536) M draft-ietf-sacm-information-model.xml (5988) A im.csv (407) D lib (1) -- Patch Links -- https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77.patch https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77.diff -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77 ----==_mimepart_58e1ba5254595_6db93fc99b27bc2c13957c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Do not merge as this is a work in progress

Changes to build the XML file from a CSV file for better looking item.

You can view, comment on, or merge this pull request online at:

  https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77

Commit Summary

  • Merge remote-tracking branch 'refs/remotes/sacmwg/master'
  • Start to use a python script for generation

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_58e1ba5254595_6db93fc99b27bc2c13957c-- From nobody Sun Apr 2 20:04:48 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75045124D68 for ; Sun, 2 Apr 2017 20:04:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.403 X-Spam-Level: X-Spam-Status: No, score=-0.403 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XNQS7LNg09ph for ; Sun, 2 Apr 2017 20:04:45 -0700 (PDT) Received: from o1.sgmail.github.com (o1.sgmail.github.com [192.254.114.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 323C612025C for ; Sun, 2 Apr 2017 20:04:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=ayhWJtdO0Y6dAszoz0hj49gBhxY=; b=h1MSFkhXEvCCGPm6 dvX3YiNs0wVfe94HV82mIX2s0GHEtsHz71DT95OnsR7126LX1WAUT4HLVhQfcAbj 8kMsHvQwvoUBqcStjqb7GcPwuT4LnznC/hBf64/DXaGBXviDQl7m3jD8MaF+MH8x q8RCHCynnqoCt7tOmjxA8Aucr28= Received: by filter0826p1mdw1.sendgrid.net with SMTP id filter0826p1mdw1-25009-58E1BBC9-1F 2017-04-03 03:04:41.334933649 +0000 UTC Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2b-ext-cp1-prd.iad.github.net [192.30.253.17]) by ismtpd0005p1iad1.sendgrid.net (SG) with ESMTP id J0KPpydQQlCtK7NRw2TQag for ; Mon, 03 Apr 2017 03:04:41.339 +0000 (UTC) Date: Sun, 02 Apr 2017 20:04:41 -0700 From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Push Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e1bbc937734_53a53ff4bc169c34331e4"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: push X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H3tNww669/rg2q2vl7b+NQl6E1dLJ/7pJDNZSGi1fqURdGLHh8HngRJsXW yQH5A//0y+tKiObOUxOQObYPExCDo8/N8gmrOp1bWUKYieiBhq2rj1wgLThGQILCLpXQUC3ZHcCEFA KBInksZi+wYbIq9Hr5T7UIqIDKZ1ZGa51PhvzT/2BQsEEiVyb4cylB7X2A== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 03:04:46 -0000 ----==_mimepart_58e1bbc937734_53a53ff4bc169c34331e4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit @jimsch pushed 1 commit. 81eb2db Fix the name of the script -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77/files/5e1c6db96614c2a6bd654650c5f7c06995f632d3..81eb2db06278228ab1a1ae901db485f5a0f7c47d ----==_mimepart_58e1bbc937734_53a53ff4bc169c34331e4 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

@jimsch pushed 1 commit.

  • 81eb2db Fix the name of the script

—
You are receiving this because you are subscribed to this thread.
View it on GitHub or mute the thread.

----==_mimepart_58e1bbc937734_53a53ff4bc169c34331e4-- From nobody Sun Apr 2 20:10:02 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBF5D128BB7 for ; Sun, 2 Apr 2017 20:10:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.178 X-Spam-Level: X-Spam-Status: No, score=-8.178 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.796, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bvKv23wMFkpB for ; Sun, 2 Apr 2017 20:09:58 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3B601293E3 for ; Sun, 2 Apr 2017 20:09:49 -0700 (PDT) Date: Sun, 02 Apr 2017 20:09:49 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491188989; bh=M4OuyFuNULzMoE0ij1QkntuAqeA0Wga4Baa6Haxp9cM=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=oOG9azeAESDWi2vmk9TRNf3H7H1Z3rVnRnZjb/FlJSFov5uyYHMPZL4L5heshVPOn 850o9uxp4m18Tm4Zy7ELxbyR3u9u5CUiXoQqNXnRVkfURDIhB/1av4KSV+9G1564ju FNIuYQlHAq3/3oS47sGGs3WbQduJvv2iIfziG0ZI= From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Push Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e1bcfd340a8_248b3f993c3bfc30112073"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: push X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 03:10:02 -0000 ----==_mimepart_58e1bcfd340a8_248b3f993c3bfc30112073 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit @jimsch pushed 1 commit. fdee7af Missing function to build the html version -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77/files/81eb2db06278228ab1a1ae901db485f5a0f7c47d..fdee7af8ff09c3489bfc5e8752ac22425587de25 ----==_mimepart_58e1bcfd340a8_248b3f993c3bfc30112073 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

@jimsch pushed 1 commit.

  • fdee7af Missing function to build the html version

—
You are receiving this because you are subscribed to this thread.
View it on GitHub or mute the thread.

----==_mimepart_58e1bcfd340a8_248b3f993c3bfc30112073-- From nobody Sun Apr 2 20:15:16 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF233127078 for ; Sun, 2 Apr 2017 20:15:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.178 X-Spam-Level: X-Spam-Status: No, score=-8.178 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.796, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7sEI7zx-aEAb for ; Sun, 2 Apr 2017 20:15:13 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E726C124D68 for ; Sun, 2 Apr 2017 20:15:12 -0700 (PDT) Date: Sun, 02 Apr 2017 20:15:12 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491189312; bh=sFtz8Kiy2ObhKv8oAN+ceNQ0GXWJCRfMXwwcDRpbaF0=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=SFdUfjOUExIn2CSSqJPcZlorI301EBQSzc0ExqdHJrk0RUJ+TPq8GMTO0HNKLsvjI hU6qKFlrzw2/SOhXllhJCMKclHJvqPUVuNLY3lDcmtU+U6U5sEyuOnrvW57qifamzF rGLqrQEsa72Ss8r0FrxPXbMmy9F/R18RSQ7icWa0= From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Push Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e1be4056dba_25bd3f91458d9c38896d6"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: push X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 03:15:15 -0000 ----==_mimepart_58e1be4056dba_25bd3f91458d9c38896d6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit @jimsch pushed 1 commit. 0d7ab7c Fix indentation problems -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77/files/fdee7af8ff09c3489bfc5e8752ac22425587de25..0d7ab7c710b2da38a663e3ed507300d20ca2cffd ----==_mimepart_58e1be4056dba_25bd3f91458d9c38896d6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

@jimsch pushed 1 commit.

—
You are receiving this because you are subscribed to this thread.
View it on GitHub or mute the thread.

----==_mimepart_58e1be4056dba_25bd3f91458d9c38896d6-- From nobody Sun Apr 2 20:32:22 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE8C512783A for ; Sun, 2 Apr 2017 20:32:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.403 X-Spam-Level: X-Spam-Status: No, score=-0.403 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7jJIXICiEe2H for ; Sun, 2 Apr 2017 20:32:20 -0700 (PDT) Received: from o11.sgmail.github.com (o11.sgmail.github.com [167.89.101.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B7671242F7 for ; Sun, 2 Apr 2017 20:32:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=vrXP+oCzSVOFmIx7wwtDFMdocV8=; b=IyjwYrewyGR7wqPH 6h5inTv9gjFej1sAL9fTTMPj1zxUGjUFG2XuAecfN172goRPW4O2Nlxo+8tzmLpl 08K/SQdpf5jon/4pZJ0xfuZ2VvORTN76UxumObZWbFLON6vGNs/GsR0GEdKk5JnX PSbfFR0DqIuzukdWThSF1rI4MIE= Received: by filter0578p1mdw1.sendgrid.net with SMTP id filter0578p1mdw1-14464-58E1C242-2A 2017-04-03 03:32:18.472473193 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0001p1iad1.sendgrid.net (SG) with ESMTP id o9tx_dHkR8eq3cHGdUoO6g for ; Mon, 03 Apr 2017 03:32:18.419 +0000 (UTC) Date: Sun, 02 Apr 2017 20:32:18 -0700 From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Push Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e1c24253414_44d3f8338fc9c3410567c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: push X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H/MVrTBMZEit78Jypul0s0BHmPzOrpiv8EvTjlKBxmqVCfx+l3YU/mUPtR wPMprwuYSvyP917WyocurGue0QZZKjN2xaudw/NGz7aaWaGOyI8PcjZe96/dPsM+jy6t/vnz486s0i pXywR8OLN42/lKodfq6UC9pDHEn9LyV/0zSnzcwHGwRzj8B3rqQB7CQagA== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 03:32:22 -0000 ----==_mimepart_58e1c24253414_44d3f8338fc9c3410567c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit @jimsch pushed 1 commit. b428463 Correct column point -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77/files/0d7ab7c710b2da38a663e3ed507300d20ca2cffd..b428463925b7a2c1600f5b789f9ef0cac77d716a ----==_mimepart_58e1c24253414_44d3f8338fc9c3410567c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

@jimsch pushed 1 commit.

—
You are receiving this because you are subscribed to this thread.
View it on GitHub or mute the thread.

----==_mimepart_58e1c24253414_44d3f8338fc9c3410567c-- From nobody Tue Apr 4 11:22:27 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED14712943C for ; Tue, 4 Apr 2017 11:22:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.401 X-Spam-Level: X-Spam-Status: No, score=-5.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pozbEx4wFgGt for ; Tue, 4 Apr 2017 11:22:24 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 373CE128E19 for ; Tue, 4 Apr 2017 11:22:24 -0700 (PDT) Date: Tue, 04 Apr 2017 11:22:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491330143; bh=/hxnwve+LQz4SQEBvpYTYfKWLqcYlgGVjxhNz/SyqTk=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=xlHk97vkNUlH6R8/5F5bjpdWiXZO7ETg88Maa38Kx1kPXSZ/DzL7omskcyshtcsAv gNNoUpimuOR42N7Khp9zkbgiMlJNI8WIeBCjxZic4KdIywsNo3yehNAgL8bN+C/qrE uRuFMcvmrKTRn3tTmsqItZ69AmFjvkDawiEbPA8I= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e3e45f505a2_65b33fc19f7dbc349828c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] Generating IE in the I-D from a CSV file (#75) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Apr 2017 18:22:26 -0000 ----==_mimepart_58e3e45f505a2_65b33fc19f7dbc349828c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Jim is working on this here https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/75#issuecomment-291588619 ----==_mimepart_58e3e45f505a2_65b33fc19f7dbc349828c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Jim is working on this here #77.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_58e3e45f505a2_65b33fc19f7dbc349828c-- From nobody Tue Apr 4 11:59:20 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 130FE12932A for ; Tue, 4 Apr 2017 11:59:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.615 X-Spam-Level: X-Spam-Status: No, score=-5.615 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQ6gCIAAFJZH for ; Tue, 4 Apr 2017 11:59:17 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F5E0126B7F for ; Tue, 4 Apr 2017 11:59:17 -0700 (PDT) Date: Tue, 04 Apr 2017 11:59:16 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491332356; bh=vOvxomaLsaiGlER4M7xkhPi7FDsK6wJ1HrHB0VS0/wk=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=glsTY7hwVsNHO754TiMSYzPmK1rIi5zSf2mjtkISyWj6TA+u8Nyd8pm1GY5QFVIhu dI/BGOp21/Qd2VOgxkhXIkyCJWZjso5BMMpBpvGibgiQC5bR5hOV06LCbqOIOyl50v 2XKN1B8PoZ8DycfZ5K5bUjHGuCKoFv4mO9AdNfJk= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: sacm , Comment Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e3ed042f680_e053f9ce8d6fc3022575e"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: comment X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] designing a network interface (#34) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Apr 2017 18:59:19 -0000 ----==_mimepart_58e3ed042f680_e053f9ce8d6fc3022575e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit There is a very basic draft definition of a networkInterface IE. Other IEs suggested for inclusion in this IE, include: domain, default gateway, DNS server, and FQDN, first configure time, and time of last communication. Some network interfaces might have additional information such as: SIM card identifier, telephone number, carrier, network type, etc. For those who have participated in this thread, please review the draft IE and thread and suggestion revisions. -- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/34#issuecomment-291599007 ----==_mimepart_58e3ed042f680_e053f9ce8d6fc3022575e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

There is a very basic draft definition of a networkInterface IE. Other= IEs suggested for inclusion in this IE, include: domain, default gateway= , DNS server, and FQDN, first configure time, and time of last communicat= ion. Some network interfaces might have additional information such as: S= IM card identifier, telephone number, carrier, network type, etc. For tho= se who have participated in this thread, please review the draft IE and t= hread and suggestion revisions.

&m= dash;
You are receiving this because you commented.
Reply to th= is email directly, view it on GitHub,= or mute the thread.

= ----==_mimepart_58e3ed042f680_e053f9ce8d6fc3022575e-- From nobody Wed Apr 5 10:10:20 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CCC5128DF6 for ; Wed, 5 Apr 2017 10:10:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.296 X-Spam-Level: X-Spam-Status: No, score=-9.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.796, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Giyhz0jujBo for ; Wed, 5 Apr 2017 10:10:14 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9532126CC7 for ; Wed, 5 Apr 2017 10:10:14 -0700 (PDT) Date: Wed, 05 Apr 2017 10:10:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491412214; bh=k4I7ddzWF0WivckYRx4l81AQJTW5EJ1uhAtXAgxU+xE=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=d4OsOGzd2pdpeHypmcPJ2sA8B5y5hgEtgorFqASHrbpbv23PlRGm6yf2UZxol00iU vCzIxSRMiqQvT1mcLr+ti2eSxUJ7wEu3id4LRrRtSspTEtDk4kq+hoRcvWRs650Ovj R/LAEbshDlzpSKRxrEXQfCvHdGsAwwKAIgk4s+nw= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e524f5efb8d_3d043ff93aa85c3c227895"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] develop proposal for dealing with IEs (#62) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Apr 2017 17:10:16 -0000 ----==_mimepart_58e524f5efb8d_3d043ff93aa85c3c227895 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit One possible approach to deal with the large number of IEs is to create generic IEs that can be extended on a platform-by-platform basic leveraging the abstract "category" IE datatype which represents a type-choice between a set of IEs. For example, we could create a generic "file" IE where the associated ownerId, creationTime, lastAccessedTime, lastModifiedTime, and filePermission IEs would allow for the selection of the appropriate IE based on the platform in use. For example, on a Windows system, the ownerId IE would be a windowsUserId and the filePermissions would be windowsFilePermissions among other IEs. The attached files provide details on what this might look like for a few existing IEs. From there, the IM would only contain these generic IEs and the platform-specific IEs would be contained in their corresponding platform submodules (i.e. all the Windows IEs would be in one document, the Linux IEs in another, etc.). [file example.txt](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900208/file.example.txt) [file.xlsx](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900207/file.xlsx) [interface example.txt](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900206/interface.example.txt) [interface.xlsx](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900210/interface.xlsx) [process example.txt](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900209/process.example.txt) [process.xlsx](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900205/process.xlsx) [service.xlsx](https://github.com/sacmwg/draft-ietf-sacm-information-model/files/900211/service.xlsx) -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/62#issuecomment-291930226 ----==_mimepart_58e524f5efb8d_3d043ff93aa85c3c227895 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

One possible approach to deal with the large number of IEs is to creat= e generic IEs that can be extended on a platform-by-platform basic levera= ging the abstract "category" IE datatype which represents a type-choice b= etween a set of IEs. For example, we could create a generic "file" IE whe= re the associated ownerId, creationTime, lastAccessedTime, lastModifiedTi= me, and filePermission IEs would allow for the selection of the appropria= te IE based on the platform in use. For example, on a Windows system, the= ownerId IE would be a windowsUserId and the filePermissions would be win= dowsFilePermissions among other IEs. The attached files provide details o= n what this might look like for a few existing IEs. From there, the IM wo= uld only contain these generic IEs and the platform-specific IEs would be= contained in their corresponding platform submodules (i.e. all the Windo= ws IEs would be in one document, the Linux IEs in another, etc.).
file example.txt
file.xlsx
interface example.txt
interface.xlsx
process example.txt
process.xlsx
service.xlsx

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58e524f5efb8d_3d043ff93aa85c3c227895-- From nobody Wed Apr 5 10:35:40 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 485AF1292CE for ; Wed, 5 Apr 2017 10:35:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.393 X-Spam-Level: X-Spam-Status: No, score=-3.393 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-2.796, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vAMqUhz7DoYC for ; Wed, 5 Apr 2017 10:35:37 -0700 (PDT) Received: from o9.sgmail.github.com (o9.sgmail.github.com [167.89.101.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90918126C7A for ; Wed, 5 Apr 2017 10:35:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=6absRgAeNp5RShRtx3fLAxpwUMo=; b=XiGYNjZdpwseprCF JeBHpWWc3NKKqOqJEtRvMZGojf3QbMoS2CoZp18jadgaUi9mFC3aa7i93pvzKUy3 32WAA11Z3Ihd/XH1j29XrpZ6Cqc0/SsHk/d42V5V729+ZBgZPxMa0HuPo+qZ2Xy3 TVfGDlng8cFTYmYeZQiSR2/Hq7E= Received: by filter1131p1mdw1.sendgrid.net with SMTP id filter1131p1mdw1-7810-58E52AE8-36 2017-04-05 17:35:36.546138569 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0003p1iad1.sendgrid.net (SG) with ESMTP id gXM61Qh1T56GRBGfiwTlhQ for ; Wed, 05 Apr 2017 17:35:36.525 +0000 (UTC) Date: Wed, 05 Apr 2017 10:35:36 -0700 From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e52ae85de42_6e673f8b3502fc3872674"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H0Cjconpe3Aldedpdn2jV3WAl0j1kvDUGdqtj5aAUDnhTemo/aauUdDfdy Glrlkj02ZoFDUtm/qYWrHaEKfNT5L03LhbJloYCyBXPqZ02a9gVmEHusqTuF6Q+JBEKRAeH0inHf58 JqB53Jpng6Qbm/OwDKjo/JURL5wREZxrfpCxPPxwfluYaWlzDXDIEMTMpA== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Apr 2017 17:35:39 -0000 ----==_mimepart_58e52ae85de42_6e673f8b3502fc3872674 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Hi Jerome, It sounds like you would like to add an IE to the softwareInstance IE that allows for the specification of files associated with a piece of installed software. For example, if you run "rpm -ql " on a Linux system, it will display the files that were installed on the system as part of the specified rpm. Is that correct? Also, can you be more specific about "adding the CIM_SoftwareElement"? Thanks, Danny -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-291937882 ----==_mimepart_58e52ae85de42_6e673f8b3502fc3872674 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi Jerome,

It sounds like you would like to add an IE to the softwareInstance IE th= at allows for the specification of files associated with a piece of install= ed software. For example, if you run "rpm -ql " on a Linux system, it will = display the files that were installed on the system as part of the specifie= d rpm. Is that correct?

Also, can you be more specific about "adding the CIM_SoftwareElement"?

Thanks,

Danny

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58e52ae85de42_6e673f8b3502fc3872674-- From nobody Wed Apr 5 11:59:35 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9039129413 for ; Wed, 5 Apr 2017 11:59:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BhQl0rixwWzA for ; Wed, 5 Apr 2017 11:59:31 -0700 (PDT) Received: from o1.sgmail.github.com (o1.sgmail.github.com [192.254.114.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD49D127A90 for ; Wed, 5 Apr 2017 11:59:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=mM0pZcJJUUjsjdwtEu9TOwxghrQ=; b=Lum7cxm7YezmqMPF uv6bp21yTd9V6uqAXHqMTIW1AT1iPhunopKsibtOkI0spCMtjSdwoLu/aNUY2A0v uoXMKjXeBan0ToKbF+akrUDS5znTRG6YeQEic1pFnHHaR41iWlXVJ/HvF8GEkyN6 AYIHNi2xoAFWZBWSSDWsTIInPcU= Received: by filter0420p1mdw1.sendgrid.net with SMTP id filter0420p1mdw1-18813-58E53E80-26 2017-04-05 18:59:12.486912517 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0005p1iad1.sendgrid.net (SG) with ESMTP id mtVnh5ISSwS7eeab_x4zdg for ; Wed, 05 Apr 2017 18:59:12.502 +0000 (UTC) Date: Wed, 05 Apr 2017 11:59:12 -0700 From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e53e8063e8f_40483fc3f541dc34340b0"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H20dZHw7GyWqUPpopC/6DdJ94QUV0iCW/ojlBrqFcExbb6xI+gtE/WPnDh J1nRjavTwhuLc95s58nXOumoI0QF3oZBhkar6wDSfG0thxrKW2VT9urNhRde5adeKgFX1u/pgXsTRx U96neQnz4IQHre2CBasOo2gRScGmhItYSjHAWgzmRDt/D34dGhVH9A7Ye68LqcDs59uWNj5w0Ilh92 0= Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Apr 2017 18:59:34 -0000 ----==_mimepart_58e53e8063e8f_40483fc3f541dc34340b0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit That is correct. Files (and their versions (or hashes)) that compose a software/package/application would be needed to be known/identified in some cases for automation. e.g. https://github.com/CISecurity/OVALRepo/pull/775/files I am not aware (after years of researches) of any proper model in any reviewed standards/interchange format for softwares' IEs that is complete enough/well designed for covering the automation use cases. (i.e. missing in CVRF) While the recently introduced softwareClass IE is derived from the CIM model, I suggested to reuse the CIM_SoftwareElement part of this model to extend the softwareClass while I identified it as being the closest element in the CIM model to what i would like to be modeled. Kindly don't hesitate to let me know if that is unclear -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-291961883 ----==_mimepart_58e53e8063e8f_40483fc3f541dc34340b0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

That is correct.
Files (and their versions (or hashes)) that compose a software/package/appl= ication would be needed to be known/identified in some cases for automation= .
e.g. http= s://github.com/CISecurity/OVALRepo/pull/775/files

I am not aware (after years of researches) of any proper model in any re= viewed standards/interchange format for softwares' IEs that is complete eno= ugh/well designed for covering the automation use cases. (i.e. missing in C= VRF)
While the recently introduced softwareClass IE is derived from the CIM mode= l, I suggested to reuse the CIM_SoftwareElement part of this model to exten= d the softwareClass while I identified it as being the closest element in t= he CIM model to what i would like to be modeled.

Kindly don't hesitate to let me know if that is unclear

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58e53e8063e8f_40483fc3f541dc34340b0-- From nobody Wed Apr 5 12:13:15 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77CCC128954 for ; Wed, 5 Apr 2017 12:13:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.393 X-Spam-Level: X-Spam-Status: No, score=-3.393 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-2.796, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wUfykKNlOHSL for ; Wed, 5 Apr 2017 12:13:11 -0700 (PDT) Received: from o9.sgmail.github.com (o9.sgmail.github.com [167.89.101.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FE4C12709D for ; Wed, 5 Apr 2017 12:13:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=OvqU1lMHD0KggbyqeZnJjQY0w6A=; b=ouVlkgCzH0XQyDy7 TDCU6C8Ts+FNIQ+CjKc8qte/un/9ucz5vV5dKrdx22swUoNo8cYa1SjxgGpImpvv x5gNu5Eqtk6tUV7wNwm+qmAbjXKsLJxxmrSEM7JduERDiJsvRNxvC6+dGyypdd7J 6Cxamj5aMgQPssjKYmBuP08NOik= Received: by filter0624p1mdw1.sendgrid.net with SMTP id filter0624p1mdw1-3764-58E541BC-5 2017-04-05 19:13:00.052139717 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0006p1iad1.sendgrid.net (SG) with ESMTP id zgfRTWa8Tj2dxA_9RDASEw for ; Wed, 05 Apr 2017 19:13:00.037 +0000 (UTC) Date: Wed, 05 Apr 2017 12:12:59 -0700 From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e541bbea4a0_69be3f7e76f8dc3c20359"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H+viKPH5Awb7LpSABIE3771TqprHXSOQjPc6IrTK57jXtN67I0HKI6n1ks 2kNq6OsRZOH51XSlDJq/oi25GTY0HluPAMmvX8ep3sQurPc2+nt8WY31labgT5tshKJklJBfzvppOM 1QUhm9nPrJhVhZ1pE36O0RHqv1vDCxtbk6s934k185I/gwH3OVjMn1hHLw== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] develop proposal for dealing with IEs (#62) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Apr 2017 19:13:13 -0000 ----==_mimepart_58e541bbea4a0_69be3f7e76f8dc3c20359 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit This is one possible approach (close to the one used in CybOX) Another possible approach would be a 'layered one', more metaphysical one, using abstraction, and "zoom-in" into a 'hierarchy' (ideally ontology). This would be similar with this type of approach http://dodcio.defense.gov/Library/DoD-Architecture-Framework/dodaf20_dm2/ applied to our domain -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/62#issuecomment-291965860 ----==_mimepart_58e541bbea4a0_69be3f7e76f8dc3c20359 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

This is one possible approach (close to the one used in CybOX)

Another possible approach would be a 'layered one', more metaphysical on= e, using abstraction, and "zoom-in" into a 'hierarchy' (ideally ontology). = This would be similar with this type of approach http://dodcio.d= efense.gov/Library/DoD-Architecture-Framework/dodaf20_dm2/ applied to o= ur domain

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58e541bbea4a0_69be3f7e76f8dc3c20359-- From nobody Thu Apr 6 06:41:10 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B9D51294F3 for ; Thu, 6 Apr 2017 06:41:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.295 X-Spam-Level: X-Spam-Status: No, score=-9.295 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.796, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OdLwmweZVXZQ for ; Thu, 6 Apr 2017 06:41:07 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FDBF1294DF for ; Thu, 6 Apr 2017 06:41:00 -0700 (PDT) Date: Thu, 06 Apr 2017 06:40:59 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491486059; bh=gwfDnrwDZGjFBxWnWVx1weX3j1g7WQH9OsqT7pTsc+w=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=SO0pnqC8sPXUnHuZ9nVnxrwngjb+oAu7s6ejFlIAxLTa+wn8dnDwREeO7T8E9yMQx le8UL7wxa/HZ69QTIIHGOwta86lp/dUOrh3n0OfjoKC3CDV/9p5GarLzD42QT5bz0x WjzbZBuWa8BTC2y/rqjeoCoO4DbEFUau06YXc6Ig= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e6456b50e12_2abe3fd818f83c2c9566e"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Apr 2017 13:41:09 -0000 ----==_mimepart_58e6456b50e12_2abe3fd818f83c2c9566e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit The majority of the uses of "identification", "identity", and "identifying" are with respect to endpoint identifiers, component identifiers, labels unique to a SACM domain, a set of attributes used to identify endpoints, and identifiers for actual endpoint attributes all of which are expected to be defined by, or under the control of the organization that owns the network. Given that, I think I agree with others that have posted thoughts on this issue and that it is acceptable to use these terms since they best describe what we are talking about and because we cover the privacy concerns in the Privacy Considerations section. As a result, I would like to propose that we close this issue. What do others think? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292177837 ----==_mimepart_58e6456b50e12_2abe3fd818f83c2c9566e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The majority of the uses of "identification", "identity", and "identif= ying" are with respect to endpoint identifiers, component identifiers, la= bels unique to a SACM domain, a set of attributes used to identify endpoi= nts, and identifiers for actual endpoint attributes all of which are expe= cted to be defined by, or under the control of the organization that owns= the network. Given that, I think I agree with others that have posted th= oughts on this issue and that it is acceptable to use these terms since t= hey best describe what we are talking about and because we cover the priv= acy concerns in the Privacy Considerations section.

As a result, I would like to propose that we close this issue. What do= others think?

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58e64d3433504_292b3fe3ff26fc3c1536d8-- From nobody Thu Apr 6 08:14:44 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52B7D1294B9 for ; Thu, 6 Apr 2017 08:14:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.019 X-Spam-Level: X-Spam-Status: No, score=-7.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id skhaBZAa2yE4 for ; Thu, 6 Apr 2017 08:14:41 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEA31128768 for ; Thu, 6 Apr 2017 08:14:40 -0700 (PDT) Date: Thu, 06 Apr 2017 08:14:39 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491491679; bh=sEFnzF81c1N+0A4+sEU14OwQnfsv0QU2fKMuBJ4tI5s=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=hyLNah2UVdtl1DwxMFj9ExmMbiH2NF25u8nXiiT23o01UdhJ+dfPDdD5GsRqKwgv/ 8P5cLgJ93zh0IQZTkfDNeLg1brsCRO3ehxAU5ZiiSJz4byBTYCz9ulHBQqNAokpp/b 36rO8ZfKXv9fJz2ZXR2zxcQd0yOcxTUrJKWeyfvM= From: Henk Birkholz Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e65b5fd5255_2a173fa331d73c3c205283"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: henkbirkholz X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Apr 2017 15:14:43 -0000 ----==_mimepart_58e65b5fd5255_2a173fa331d73c3c205283 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Are there explicit pointers to the referenced thoughts posted? Although the term identity allows for "Group identities", the SACM WG wants to refer to a specific target endpoint. If there is a NEA client or SACM component located on that target endpoint that is not a complicated task (assuming that that software component can provide guaranties about its authenticity). If a target endpoint is not "owned" by the domain, observation and profiling and resulting target endpoint characterization record might be the only way to refer to that target endpoint in the end. I.e., keeping track of target endpoints that you "do not own" can be very privacy sensitive. In consequence, I would propose to refrain from using the terms identification and identity at least in that context ("not owned by you"). We should quickly create consensus in regard to this topic. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292206358 ----==_mimepart_58e65b5fd5255_2a173fa331d73c3c205283 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Are there explicit pointers to the referenced thoughts posted?

Although the term identity allows for "Group identities", the SACM WG = wants to refer to a specific target endpoint. If there is a NEA client or= SACM component located on that target endpoint that is not a complicated= task (assuming that that software component can provide guaranties about= its authenticity). If a target endpoint is not "owned" by the domain, ob= servation and profiling and resulting target endpoint characterization re= cord might be the only way to refer to that target endpoint in the end.

I.e., keeping track of target endpoints that you "do not own" can be v= ery privacy sensitive. In consequence, I would propose to refrain from us= ing the terms identification and identity at least in that context ("not = owned by you"). We should quickly create consensus in regard to this topi= c.

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58e65b5fd5255_2a173fa331d73c3c205283-- From nobody Thu Apr 6 08:23:25 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BFC1126CE8 for ; Thu, 6 Apr 2017 08:23:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.795 X-Spam-Level: X-Spam-Status: No, score=-4.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-2.796, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uQSj_t3N7ihH for ; Thu, 6 Apr 2017 08:23:21 -0700 (PDT) Received: from o4.sgmail.github.com (o4.sgmail.github.com [192.254.112.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D6A1129457 for ; Thu, 6 Apr 2017 08:23:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=7yiV/8fOsVpK0QEKRZpYtmahH3k=; b=uWXqt1lmMIy2Ov/k zYeG0uMVXswHBpAJ3Pv0OUK33kjdMDFCqD0iOlLjOH/SyyoTBUwECFt+cMOmV6nA Y/SXVkNyvT4ukJKLIZxE40paeixpNfP1QZ5HcDXg5oOOoSwsKM/ERgxigCJwADav RUJKlP3djchPqGCeQ0ffUcrzcCI= Received: by filter0939p1mdw1.sendgrid.net with SMTP id filter0939p1mdw1-17438-58E65D64-14 2017-04-06 15:23:16.458294131 +0000 UTC Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2b-ext-cp1-prd.iad.github.net [192.30.253.17]) by ismtpd0006p1iad1.sendgrid.net (SG) with ESMTP id -0qui79TQDuq3nahzHGL0w for ; Thu, 06 Apr 2017 15:23:16.416 +0000 (UTC) Date: Thu, 06 Apr 2017 08:23:16 -0700 From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e65d645476b_54f03fa254873c38643bf"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H9jDTk3nqFsaQ6Kd3Ez6nBkaWaOPzb6j+aPffeX+PLGv5wxyiMrpxOgNgw 47U0LmEnQFm7bA83FQc8hUnZO+p09lrhPC7J+RPuhMvjFMtbqa2x6J/ugfbav7dKzyes2jC7o0STFD /Cb/eLWqTl7j0uwfJJfiCUJjKcDEkk0+VlYfHQ17UhoLVXqHNiXluHYt4w== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Apr 2017 15:23:23 -0000 ----==_mimepart_58e65d645476b_54f03fa254873c38643bf Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Yes the referenced thoughts are here https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/26. Yes, if they endpoints are not owned by the organization, they can be privacy sensitive. With that said, you typically need to agree to some terms of use, which may permit monitoring and tracking, in order to have access to the network. With this in mind, wouldn't it be ok as long as we provide the necessary mechanisms to support privacy that aligns with the organization's policies and network terms of use? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292208990 ----==_mimepart_58e65d645476b_54f03fa254873c38643bf Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Yes the referenced thoughts are here #26.

Yes, if they endpoints are not owned by the organization, they can be pr= ivacy sensitive. With that said, you typically need to agree to some terms = of use, which may permit monitoring and tracking, in order to have access t= o the network. With this in mind, wouldn't it be ok as long as we provide t= he necessary mechanisms to support privacy that aligns with the organizatio= n's policies and network terms of use?

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58e65d645476b_54f03fa254873c38643bf-- From nobody Thu Apr 6 08:38:10 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45B48129535 for ; Thu, 6 Apr 2017 08:38:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.518 X-Spam-Level: X-Spam-Status: No, score=-6.518 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A2u8bHAZxox4 for ; Thu, 6 Apr 2017 08:38:05 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B72BF129531 for ; Thu, 6 Apr 2017 08:38:03 -0700 (PDT) Date: Thu, 06 Apr 2017 08:38:03 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491493083; bh=AXdrPhkB0FzMHj+3Jb1icdGoRD3BLhVzauGQFr+g9sE=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=DvzpBrtNNu+4dyH08y5Jxu9MtM2/eJ60MDGMTiGVMveL6ep4PfMF2wxO3XBHrav/R XK2S7Rw2UjWO81CWuagSr36pVn7SZpghf67nTww8Ofx9fRykLZtxZh1D6lu2mH5A7y fKBEQiPfnxdPTz3c4Vf+X4ErxIBnKOKFNYtjUu68= From: Henk Birkholz Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e660db14351_19443fbfdb125c3461866"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: henkbirkholz X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Apr 2017 15:38:08 -0000 ----==_mimepart_58e660db14351_19443fbfdb125c3461866 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Thank you for the pointer. I will not be the show stopper here, but would like to add that every vendor that contributed to SACM at some point was in favor to avoid the terms identity and identification (as a result (identifying) attributes are aggregated in a TE characterization record that can be matched with classification profiles). I am okay with keeping text simple and conclusive and not to "make the process of thinking about the document harder". We have to make sure that identification is not a gateway/step towards to track individuals. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292213678 ----==_mimepart_58e660db14351_19443fbfdb125c3461866 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Thank you for the pointer.

I will not be the show stopper here, but would like to add that every = vendor that contributed to SACM at some point was in favor to avoid the t= erms identity and identification (as a result (identifying) attributes ar= e aggregated in a TE characterization record that can be matched with cla= ssification profiles). I am okay with keeping text simple and conclusive = and not to "make the process of thinking about the document harder".

We have to make sure that identification is not a gateway/step towards= to track individuals.

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58e660db14351_19443fbfdb125c3461866-- From nobody Thu Apr 6 09:01:12 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6C4912942F for ; Thu, 6 Apr 2017 09:01:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.178 X-Spam-Level: X-Spam-Status: No, score=-3.178 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-2.796, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8b6UGuhTvI67 for ; Thu, 6 Apr 2017 09:01:09 -0700 (PDT) Received: from o9.sgmail.github.com (o9.sgmail.github.com [167.89.101.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 545821292D3 for ; Thu, 6 Apr 2017 09:01:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=Fxd4fsyWZxCU5T/sKirT0tZmz+A=; b=aWw7G2HPNG3R5RtH 6pPMUHPzkKQC8uAXIrKqPrOLAI9gWq+96ZgWAEloUxY05q7jR+YNIUH0sdQD304j G/tQpsSFg/ajXEHW148CAwcHvNHPUHPC5zMK9GWQX4P5Bd5b14mebpPiLlz/QxmF V6En7EBLrUsEh8XKqdYztj/8kD8= Received: by filter1073p1mdw1.sendgrid.net with SMTP id filter1073p1mdw1-10482-58E66643-4D 2017-04-06 16:01:07.442433683 +0000 UTC Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2b-ext-cp1-prd.iad.github.net [192.30.253.17]) by ismtpd0001p1iad1.sendgrid.net (SG) with ESMTP id KPP9WvhRT2mQ9N3yPAvVqg for ; Thu, 06 Apr 2017 16:01:07.351 +0000 (UTC) Date: Thu, 06 Apr 2017 09:01:07 -0700 From: Jim Schaad Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e66643381e9_4ef3fd588eadc2c4253ca"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H3duTepTrJmIOUx0yLCYKlLN/xf+yap0DKOw3OZQcYMB4Chj3DsVTLUxvn 2EHUZJmLHlFl6nP/q9LMXzkj2ang6jfJPxv/KCkwyKeJnpQdmI1p377xqpHOnP2pwOrA4oitM0DMHJ ByxhpkFJwpDHuCJRRkUunr6ZAxooVf7Cgz2gHL6a+sKKggdASmRTL9t5Hw== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] (WIP) Build the xml for elements from a CSV file (#77) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Apr 2017 16:01:11 -0000 ----==_mimepart_58e66643381e9_4ef3fd588eadc2c4253ca Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Unless you want something different - you can merge at any time -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/77#issuecomment-292221560 ----==_mimepart_58e66643381e9_4ef3fd588eadc2c4253ca Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Unless you want something different - you can merge at any time

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_58e66643381e9_4ef3fd588eadc2c4253ca-- From nobody Thu Apr 6 23:33:32 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A564B1287A5 for ; Thu, 6 Apr 2017 23:33:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.616 X-Spam-Level: X-Spam-Status: No, score=-0.616 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zjqu5ECp0kUe for ; Thu, 6 Apr 2017 23:33:27 -0700 (PDT) Received: from o1.sgmail.github.com (o1.sgmail.github.com [192.254.114.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 194E11270FC for ; Thu, 6 Apr 2017 23:33:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=Sb//l3Y8qTkmB3gEHrFcLKu09bw=; b=qpoYJWPzDd8hTvdN GN9SvtQYapeD0jSuqxYIpUrUJC9C4HFnC1BnCbZxUNm7nGs4SsBYYjm88YypYwng 7ofVTW2+ir94RktRtCcN3M2A0X3lPt56wOPd5Hl46lqXKjND4tKjP7Co3x8UmcO+ ikbxAgofsfpBBQeHwflkYp1dFjA= Received: by filter1116p1mdw1.sendgrid.net with SMTP id filter1116p1mdw1-16416-58E732B5-2 2017-04-07 06:33:25.055976694 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0006p1iad1.sendgrid.net (SG) with ESMTP id LgMugGP5R3e5_D-UMocfWw for ; Fri, 07 Apr 2017 06:33:25.046 +0000 (UTC) Date: Thu, 06 Apr 2017 23:33:24 -0700 From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58e732b4e9e70_4873f9b8fdb1c34104816"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9HwHS8ysdrvu0rvkQQdpBEst3ubd5qk9iExJDxyR2MaDF4jAeOYa4b9e84W nBHOkMir2uyc8qH1WHBjurt2qydspgb4zZXtrnESIZZ+pB3wZ+yRNyId/mtO/NxMEsLNUr+E7lsy+q QHzjhFQbTIZ57fr+QFKgQRQgC84NlgfMLuFg8TPhGGxIfr+b+Y1+T5aCcQ== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Apr 2017 06:33:31 -0000 ----==_mimepart_58e732b4e9e70_4873f9b8fdb1c34104816 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I understand and agree with the keep it simple here. It is important to have a relationship with a SoftwareInstance and Files. (could it be libraries files (e.g. OpenSSL), and the version of these files (could it be binaries/so other softwareInstances) will be important to be known during the automation process) This does not need a complex DM (CIM_SoftwareIdentity was just suggested for interoperability) -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-292453474 ----==_mimepart_58e732b4e9e70_4873f9b8fdb1c34104816 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

I understand and agree with the keep it simple here.
It is important to have a relationship with a SoftwareInstance and Files. (could it be libraries files (e.g. OpenSSL), and the version of these files= (could it be binaries/so other softwareInstances) will be important to be = known during the automation process)

This does not need a complex DM (CIM_SoftwareIdentity was just suggested= for interoperability)

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58e732b4e9e70_4873f9b8fdb1c34104816-- From nobody Mon Apr 10 06:27:41 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0EC41294CC for ; Mon, 10 Apr 2017 06:27:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.496 X-Spam-Level: X-Spam-Status: No, score=-6.496 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQCKRi2Fevlb for ; Mon, 10 Apr 2017 06:27:39 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B596129487 for ; Mon, 10 Apr 2017 06:27:38 -0700 (PDT) Date: Mon, 10 Apr 2017 06:27:38 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491830858; bh=q2Z/hHyEIKTsN/e7W+ewc8ArmznmKEK1D7yP5eV3Iz4=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=uh7RISf/zkQ/MA5Vw1vLUR9+kNftRPAj0OERnDMmYU1WgDUoGZCNpFsK8qk2MWytX j/RtPxhFbJdcZ7pN86M4O/Ibaq4puh94nD2y6kG2X8ok/ij5G5R83NBEFE4xOcyFJZ K7SRhOB/UhAC6Qp1ZToARUJWl4v9c3L1oJA74X/Y= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58eb884a28500_62db3fcee97b3c3c139850"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Apr 2017 13:27:41 -0000 ----==_mimepart_58eb884a28500_62db3fcee97b3c3c139850 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Neither will I if people really want to change the terms :). I was just thinking that given our other work items, this one might not be that important at this point especially given the feedback I saw in the thread. With that said, we could also just defer this and leave it as an item to clean up at a later time when we get closer to publication. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292948857 ----==_mimepart_58eb884a28500_62db3fcee97b3c3c139850 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Neither will I if people really want to change the terms :). I was jus= t thinking that given our other work items, this one might not be that im= portant at this point especially given the feedback I saw in the thread. = With that said, we could also just defer this and leave it as an item to = clean up at a later time when we get closer to publication.

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58eb884a28500_62db3fcee97b3c3c139850-- From nobody Mon Apr 10 06:29:04 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A62C129498 for ; Mon, 10 Apr 2017 06:28:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.182 X-Spam-Level: X-Spam-Status: No, score=-8.182 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5xVID6LfGD2c for ; Mon, 10 Apr 2017 06:28:56 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D98AA120046 for ; Mon, 10 Apr 2017 06:28:55 -0700 (PDT) Date: Mon, 10 Apr 2017 06:28:55 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1491830935; bh=uyY7qSVAunVx4YnMmMcbvHGr9/SDeE7wbT7inbGOrAA=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=PPLuSmy+oJ57+69IAT2+y4iPBN+fJC4YnzI16mgG3EUuAE7hb42BpCanmIH1B4NnM hOXK89o1cP7t7OFF5x1dc02W+/R/VOioERKerHUBi4uTgRYA1y+U7lotYgLKzdt1pM D670rDogG2W8KrVLa1m815d//ohwHPiFppXf5C30= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58eb889722f2f_4fa3f911ee8bc34840f9"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Apr 2017 13:28:57 -0000 ----==_mimepart_58eb889722f2f_4fa3f911ee8bc34840f9 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Thanks for the clarification Jerome. Do you think adding a filepath attribute would be sufficient to address this gap? Also, do others have thoughts on this? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-292949207 ----==_mimepart_58eb889722f2f_4fa3f911ee8bc34840f9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Thanks for the clarification Jerome. Do you think adding a filepath at= tribute would be sufficient to address this gap? Also, do others have tho= ughts on this?

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_58eb8a392bf54_70603fbc8e26bc3827798b-- From nobody Wed Apr 12 07:43:12 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 732381316F2 for ; Wed, 12 Apr 2017 07:43:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.697 X-Spam-Level: X-Spam-Status: No, score=-2.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ea2uojJyGWDv for ; Wed, 12 Apr 2017 07:43:04 -0700 (PDT) Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6C931316E4 for ; Wed, 12 Apr 2017 07:42:46 -0700 (PDT) Received: by mail-qk0-x234.google.com with SMTP id p68so24975773qke.1 for ; Wed, 12 Apr 2017 07:42:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=t0HvQOvqQiND0XXgwsPofD/iEC6HdHnfw+1BZXGw1Ms=; b=H6/kBYjMGwFzK3Rf2bdKFcdR0cLkB05RU0ncXBjChkSmVGccI+iJLjipyy/4BJ5sxa JypkI0MLih17gNURtutSEnzvz7gIjH9pq2TT93wE+Vmc5v4yO3As8wFfEIF8qt/E9CJ2 yngvO4Qutt+qmnOopJ73o4m/iCzrVGRTHUmaYZ/fFAY6O/kiRzI3B7z8O54SdzcONcU5 PKjXo4+WVdrG+pttpdv4zpiRZzjGNwl1A+wTPZFKS13wxfwFxxjffn8VB3Q+USQomJGu 2T89LmQKrdXQo4ngFwYpjARZiT/eHqaPtjRDxM/zDCYzrXc1MQucMF8/8+KB/FLXF425 C0rA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=t0HvQOvqQiND0XXgwsPofD/iEC6HdHnfw+1BZXGw1Ms=; b=fa5JlH6q5bw7bIcQW7lAUJYT5x1+8odrXXTFwDKlZuAEEJjC7lM0FB3T4TIYVYskc9 YsIGTomVWzkAwiBuCCvqQQjnSj+yHLDr/+js2eututs9qZ35opS1m47YqD+YHUYfNUEl 9yxsg+jn+DRiiNRxdqt/9ABV3Tg4Jjoh7qpYSayj5YHWQ06iFLW9EZDcldevSCwefeq/ p6MMeyG5vRtPrzoQ6AChiCQBIcr6aUfa7bTcrCfzsHjq6+MRjtmLhaIY1Z5jHtn2eX3G dhdYbkcj2VM2f24vhbxvHAcqnMqD6qOVsyQRy9H0PQfIDXr6WNzi/wk+Tj/SE7Bfib9o MPbQ== X-Gm-Message-State: AN3rC/70z9k8IAIHeTuKjdMifyE0BA8s0IhqQpWU93PVvth7Q96L8536S5k2D/4bsNuw/D40ZD88dQohRKVuQQ== X-Received: by 10.55.66.136 with SMTP id p130mr30770354qka.89.1492008165649; Wed, 12 Apr 2017 07:42:45 -0700 (PDT) MIME-Version: 1.0 Received: by 10.140.81.73 with HTTP; Wed, 12 Apr 2017 07:42:45 -0700 (PDT) From: Jessica Fitzgerald-McKay Date: Wed, 12 Apr 2017 10:42:45 -0400 Message-ID: To: "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a1148965cb73ed0054cf9383f Archived-At: Subject: [sacm] vulnerability workflow information elements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Apr 2017 14:43:11 -0000 --001a1148965cb73ed0054cf9383f Content-Type: text/plain; charset=UTF-8 During IETF 98, SACM discussed the information elements required to execute each task in the vulnerability assessment work flow. A description of the vulnerability work flow, associated tasks, and proposed information elements can be found here: https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.pdf . The work flow defines communications between components. Proposed information element selections for each component pairing begin on slide 17. The group agreed to continue the discussion of which information elements are necessary to communicate between components on the mailing list. Please review the slide deck, and send your thoughts on which information elements are necessary to communicate between: - The VDD and the vulnerability assessor - The vulnerability assessor and the endpoint repository - The endpoint repository and the collector, and - The collector and the target endpoint. --001a1148965cb73ed0054cf9383f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Du= ring IETF 98, SACM discussed the information elements required to execute e= ach task in the vulnerability assessment work flow. A description of the vu= lnerability work flow, associated tasks, and proposed information elements = can be found here: https://www.ietf.org= /proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.= pdf.

<= /div>
The work flow = defines communications between components. Proposed information element sel= ections for each component pairing begin on slide 17. The group agreed to c= ontinue the discussion of which information elements are necessary to commu= nicate between components on the mailing list. Please review the slide deck= , and send your thoughts on which information elements are necessary to com= municate between:
  • The VDD and the vulnerability ass= essor
  • The vulnerability a= ssessor and the endpoint repository
  • The endpoint repository and the collector, and
  • The collector and the target endpoint.
--001a1148965cb73ed0054cf9383f-- From nobody Wed Apr 12 11:00:55 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD78F12EB24 for ; Wed, 12 Apr 2017 11:00:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ycgbrsGt8ISO for ; Wed, 12 Apr 2017 11:00:51 -0700 (PDT) Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C1FB12EB28 for ; Wed, 12 Apr 2017 11:00:51 -0700 (PDT) Received: by mail-io0-x231.google.com with SMTP id a103so52232017ioj.1 for ; Wed, 12 Apr 2017 11:00:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=04FXHKQ7EobZSjxxDmTRRqBmYSyD50Ib7xDo68blnyo=; b=skJKtWxebpAXPMeet2lcnqXGGOggAs0fXKLb1BEKZ0InzNYh8V1BS52JMrr2awyAcQ cdNK9a2HEwc7GpbsH4/DWU7Xx6Vn3SxThsM1RZJSa8JBmRs/bs1dkWUYMvwCLe3lL4Le ujaMaR9Tyi6qo8qsnMdFlgvpSy/R7GBvCZkSN5GjlT/n1cxdFQq4UfKbnBgTPu210Lyt TsXv3Rmv+lxmrWL1+4WcKPp9JX87/dZUeUKhCvuZLuXwSTV0mHyfmjRmy9E2nKlkI2xD p/8CN5eS5aseeDmqkeHFswBlIMLjUBwISGA80Jdtf8HSKEN8vcjoziJWUjLS/7Kv0sjS PRPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=04FXHKQ7EobZSjxxDmTRRqBmYSyD50Ib7xDo68blnyo=; b=uVdNXfDCbwEmnY7xfMoLjc6kzLYDhNiiafcdzdccuWvy5nl1+zh3+w1WYddsOnSjYq 6ZlvDvzKndsLafZSmYjy6eAmMnG77DyWam+OH5KIxD1v9mVUFuOZq158cOadDh6oqbh0 reVQH2vA3ZRIWvp3tKg/Rvc/9EBA0MX0dP0z/OBo9bE4F1c6xIWWFRgn6hjha0lI1KD/ fi6v31XLqoII+0vSnIqL8tlNpNIvzlDeidahYcRuEasN8AEYm4to7tRLFtE7DGb+OHDO KzF6mPFoMfqH6vF9g07xVYwZtZiyDmd0sBNnCTuMK7SsMgISUUmaCfM2bTVqCnQKkv6k U8PA== X-Gm-Message-State: AN3rC/4gLt6Jqk2NOmyCt4fVWtCpE/4y9uDSn5tFrUMOI8xq+LlKxTduDSuqxDE2nmDU2dkoqnyutOt+07hR/g== X-Received: by 10.107.170.80 with SMTP id t77mr24925494ioe.113.1492020050187; Wed, 12 Apr 2017 11:00:50 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Adam Montville Date: Wed, 12 Apr 2017 18:00:39 +0000 Message-ID: To: Jessica Fitzgerald-McKay , "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a11415d5816d9ff054cfbfd31 Archived-At: Subject: Re: [sacm] vulnerability workflow information elements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Apr 2017 18:00:54 -0000 --001a11415d5816d9ff054cfbfd31 Content-Type: text/plain; charset=UTF-8 Thanks for continuing the conversation, Jess. I know there are some points from the meeting we wanted to work out on the list, and one of those points may be a discussion needing to happen in front of this one - which components are the right ones? We had some discussion about this during the meeting, but not the follow-on discussion here. So, SACM, should we talk further about our perspective on these components? >From the meeting, and from previous discussions, the components are viewed as being composable. Meaning they represent a collection of functionality that may or may not be implemented by a single solution. The two perspectives at play were on slides 6 and 7 of the same deck Jess points out. Then, are the interactions between these components the right ones? Then, what are the necessary information elements needing to be sent for each interaction? Additionally, Dave Waltermire and I are committed to begin planning and organizing IETF 99 hackathon participation so that we can cobble together what a solution might look like, so that we can either validate what comes out of these discussions and/or discover the solutions we might consider. On Wed, Apr 12, 2017 at 9:43 AM Jessica Fitzgerald-McKay wrote: > During IETF 98, SACM discussed the information elements required to > execute each task in the vulnerability assessment work flow. A description > of the vulnerability work flow, associated tasks, and proposed information > elements can be found here: > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.pdf > . > > The work flow defines communications between components. Proposed > information element selections for each component pairing begin on slide > 17. The group agreed to continue the discussion of which information > elements are necessary to communicate between components on the mailing > list. Please review the slide deck, and send your thoughts on which > information elements are necessary to communicate between: > > - The VDD and the vulnerability assessor > - The vulnerability assessor and the endpoint repository > - The endpoint repository and the collector, and > - The collector and the target endpoint. > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > --001a11415d5816d9ff054cfbfd31 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thanks for continuing the conversation, Jess. I know there= are some points from the meeting we wanted to work out on the list, and on= e of those points may be a discussion needing to happen in front of this on= e - which components are the right ones? We had some discussion about this = during the meeting, but not the follow-on discussion here.

So, SACM, should we talk further about our perspective on these componen= ts? From the meeting, and from previous discussions, the components are vie= wed as being composable. Meaning they represent a collection of functionali= ty that may or may not be implemented by a single solution. The two perspec= tives at play were on slides 6 and 7 of the same deck Jess points out.=C2= =A0

Then, are the interactions between these compo= nents the right ones?=C2=A0

Then, what are the nec= essary information elements needing to be sent for each interaction?
<= div>
Additionally, Dave Waltermire and I are committed to beg= in planning and organizing IETF 99 hackathon participation so that we can c= obble together what a solution might look like, so that we can either valid= ate what comes out of these discussions and/or discover the solutions we mi= ght consider.


On Wed, Apr 12, 2017 at 9:43 AM Jessica Fitzgerald-McKay <<= a href=3D"mailto:jmfmckay@gmail.com">jmfmckay@gmail.com> wrote:
<= /div>
During IETF= 98, SACM discussed the information elements required to execute each task = in the vulnerability assessment work flow. A description of the vulnerabili= ty work flow, associated tasks, and proposed information elements can be fo= und here: https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerab= ility-scenario-discussion-00.pdf.

The work flow defin= es communications between components. Proposed information element selectio= ns for each component pairing begin on slide 17. The group agreed to contin= ue the discussion of which information elements are necessary to communicat= e between components on the mailing list. Please review the slide deck, and= send your thoughts on which information elements are necessary to communic= ate between:
  • T= he VDD and the vulnerability assessor
  • The vulnerability assessor and th= e endpoint repository
  • The endpoint repository and the collector, and
  • The collector and the target endpoint.
_______________________________________________
sacm mailing list
sacm= @ietf.org
https://www.ietf.org/mailman/listinfo/= sacm
--001a11415d5816d9ff054cfbfd31-- From nobody Wed Apr 12 22:59:04 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E4AE128B8F for ; Wed, 12 Apr 2017 22:58:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 51XJgys-xY4g for ; Wed, 12 Apr 2017 22:58:55 -0700 (PDT) Received: from o1.sgmail.github.com (o1.sgmail.github.com [192.254.114.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 458451267BB for ; Wed, 12 Apr 2017 22:58:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=MWedtQYZCVvGdynixrcevFBLS4k=; b=jC0ExnRMnwdZ1cdv JguYQxlZjkCoVPo5V58cnDs+QhpjHL8srVjXrOfUpbwq0bbjbSCRi21ChiN6S4Mx bFnv8upvuW8A7glc1EXOnZRtiV0TdEz/1p6p0U9D6FbT7vuiySYyuHYM3gPnViuZ IXwQ7d/asLiQBmUCYX/Fk7U+Xk4= Received: by filter0970p1mdw1.sendgrid.net with SMTP id filter0970p1mdw1-2633-58EF139C-13 2017-04-13 05:58:52.18930007 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0005p1iad1.sendgrid.net (SG) with ESMTP id XpICQPaMQ4yFblJy4O-6kA for ; Thu, 13 Apr 2017 05:58:52.192 +0000 (UTC) Date: Wed, 12 Apr 2017 22:58:52 -0700 From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_58ef139ce2be_6a133f8dde033c381619b8"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9HwpEGNG0mKONZlnik/TPHGzYVXNEyXbj3akxuF+L45xST/QDsQPfbSZaE+ ApFT/ez9wcGAsTczYWktBYohNTD0IAVCGdm8P7Hpm3YFUORvPzm/Qc2lWaRVLDIZoFEy2wiE5L1+LM TP77nHA/BoGQOeH4JF4FHTpQD+17oHsrZNhpUVdg4TCcEm7eMa/e7CKNjQ== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Apr 2017 05:58:57 -0000 ----==_mimepart_58ef139ce2be_6a133f8dde033c381619b8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit filepath could be obtained from SWID, but unknown for custom softwares/applications So I would recommend **filename+version** couples to cover _**libraries**_ (binaries/components that are not really SoftwareInstance) NB: this will be easily highlighted when validating using CVEs Example of illustration: Figure 2, Page 4 (Bins/Libs) of NIST SP 800-190 (DRAFT) http://csrc.nist.gov/publications/drafts/800-190/sp800-190-draft.pdf See also 4.2.1 (and 4.3.1) Page 21 -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-293789884 ----==_mimepart_58ef139ce2be_6a133f8dde033c381619b8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

filepath could be obtained from SWID, but unknown for custom softwares/a= pplications

So I would recommend filename+version couples to cover = libraries (binaries/components that are not reall= y SoftwareInstance)
NB: this will be easily highlighted when validating using CVEs

Example of illustration: Figure 2, Page 4 (Bins/Libs) of NIST SP 800-190= (DRAFT)
http://csrc.nist.gov/publications/drafts/800-190/sp800-190-draft.pdf<= /a>
See also 4.2.1 (and 4.3.1) Page 21

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_58ef139ce2be_6a133f8dde033c381619b8-- From nobody Tue Apr 18 06:04:09 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADC2F12EB9C for ; Tue, 18 Apr 2017 06:04:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aRCzvzwPHHLT for ; Tue, 18 Apr 2017 06:04:07 -0700 (PDT) Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C3861274D0 for ; Tue, 18 Apr 2017 06:04:07 -0700 (PDT) Received: by mail-io0-x234.google.com with SMTP id a103so190470505ioj.1 for ; Tue, 18 Apr 2017 06:04:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=jfGYbXyBAwjDfYuxesoLAg8Q8NJTb5JSWp4rIzLyfcM=; b=BNbnJw3ZpLEg9mu8x3X0Zbt1X/SL+yagCgKCmhnYJHc0ulPUclvtvo6UrnZNRedfj4 Pd/40CNuUqg033LUmG025wUUyeeSGV849eJYXfbKRHknVjjM50abZi07WEFN6GMi5wQB hkEUlCCsyrsLYFmlEgjJhWPNRzlRODzmAsQjYO3L2qSHdf2ILwCCax/PR1skXPRoo9SU 0G4xgqOC6U4sYnJ3BTChY2yUiXGuNjlC/oZ5eNpvpreZGcJxQxJmY8pzCXtGEliF4wAu /uKbk3PH5fi1OoyvDD5CW0EejpxhvZnUcVC7RI2a8dVbqLWDY86WDcH5CNnFDZOdl09l t6Bw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=jfGYbXyBAwjDfYuxesoLAg8Q8NJTb5JSWp4rIzLyfcM=; b=ahqxOqD+ma4uYPHA1oVMy+7/X9W2eRs/5l8LLA5JWTCXYzviJzGE/2Hdo7zKfgJNKy bmt9Ub/7eItyTAmEGWGB9EA4rZojeXMzNXmU+GIfPOy09xoWhRzvER4sBYEf7KE8o8sI MNImZMitpInbZyfSFVxuBbh/WwAV3uYGteOQu2jsKhk8XO2CHck/WgTfsyYaQGSnc/nq 43LLt0RTj5b5m0ajxoIBbd7Nx7d8icN+dBQEB0LrZssHqRDqxZuoOr0y8xvjqoZUdYkB aWokdLzoBKl5rfqzSHXhzTza+Ro4f7R432kigC9/4nt7vaYE4Qii/xUxLdeuVMdkfjJ2 Wy8w== X-Gm-Message-State: AN3rC/5mZjogOt/cdeMsI11qpwskFBzNB/dEuXj4VRnOydtodYMafGyi rpgBDQgjmZGVmE4EuUwcSv0J8W/SIY6l X-Received: by 10.107.53.196 with SMTP id k65mr8988880ioo.106.1492520645978; Tue, 18 Apr 2017 06:04:05 -0700 (PDT) MIME-Version: 1.0 From: Adam Montville Date: Tue, 18 Apr 2017 13:03:55 +0000 Message-ID: To: "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a11449722eca271054d708adb Archived-At: Subject: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Apr 2017 13:04:09 -0000 --001a11449722eca271054d708adb Content-Type: text/plain; charset=UTF-8 Hi All: We've got a list of components we think we care about for our vulnerability assessment scenario (focusing on the narrowest "ideal case" through the scenario for the time being. These are: * Vulnerability Detection Data Repository * Vulnerability Assessor * Endpoint Repository * Collector * Target Endpoint * Assessment Results Repository For reference, see our wiki [1] and/or the slides from IETF 98 [2] and/or the minutes from IETF 98 [3] Question to the WG: Is this an appropriate initial list of components? Please opine within the next few days (say by end of your day on Thursday, wherever you may be), so that we can generate some momentum on this effort. Kind regards, Adam [1] https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario [2] https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.pdf [3] https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt --001a11449722eca271054d708adb Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi All:

We've got a list of compone= nts we think we care about for our vulnerability assessment scenario (focus= ing on the narrowest "ideal case" through the scenario for the ti= me being.

These are:

* Vu= lnerability Detection Data Repository
* Vulnerability Assessor
* Endpoint Repository
* Collector
* Target Endp= oint
* Assessment Results Repository

For= reference, see our wiki [1] and/or the slides from IETF 98 [2] and/or the = minutes from IETF 98 [3]

Question to the WG: Is th= is an appropriate initial list of components?

Plea= se opine within the next few days (say by end of your day on Thursday, wher= ever you may be), so that we can generate some momentum on this effort.

Kind regards,

Adam



--001a11449722eca271054d708adb-- From nobody Tue Apr 18 07:21:32 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DBE51315A6 for ; Tue, 18 Apr 2017 07:21:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id chgOc-brpSHn for ; Tue, 18 Apr 2017 07:21:30 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id DD69A12F24E for ; Tue, 18 Apr 2017 07:21:29 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 6EBF06C02CC; Tue, 18 Apr 2017 10:21:38 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 5F7566C02D0; Tue, 18 Apr 2017 10:21:38 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 18 Apr 2017 10:21:29 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Tue, 18 Apr 2017 10:21:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ed4beIxAkF0oCnI9taZ+wsulLlTsGauHUxsnngA+tEs=; b=TR4m3+9rWOOV8i8csHYprbGvJ4bhahSc4PwlJkBAXy7R0k7ekIlmRW0d/sDTlWjViQhcM/1xVzNxEUHZ+kJCtHHaRhZHgJZwlllEMW3as1U7qLG+RDk6uViGKwTc3l/beTpZZ/OvezTRsM4q4PWk/twoPksJXdej9Q0TNlxA3ro= Received: from DM5PR09MB1354.namprd09.prod.outlook.com (10.172.38.135) by DM5PR09MB1353.namprd09.prod.outlook.com (10.172.38.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Tue, 18 Apr 2017 14:21:22 +0000 Received: from DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) by DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) with mapi id 15.01.1034.015; Tue, 18 Apr 2017 14:21:22 +0000 From: "Haynes, Dan" To: Adam Montville , "sacm@ietf.org" Thread-Topic: [sacm] Components for Vulnerability Assessment Thread-Index: AQHSuERo1RuKpbFar0WA/n0zX/1IM6HLLVhQ Date: Tue, 18 Apr 2017 14:21:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.80.55.86] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR09MB1353; 7:NoxB1QERSfGdd8QG2V27TWv4qh/idDea4XCYTU7e6s0QunLggrS2vO1chfGl8YUvvEWB39jXxilRhQgbc6L+I3ZwqvjJpHLBV+AGiSsTSApd+0qxLjq0FvrZ19a2avELa6qITtOs/ERQluWcJ4yvzABMQ08y9omnp6BVVEgGyR1k2ojtlz+LKmdinxorVVqReVD2d9B8adb+fYw5uTNlGUOYLv32HJi+5Os24NLmWG2kZ8teQ2w46B/RGzMExSFZCmk6XK0D/qpHOO1NNjyVpmQs6AD0q0pJf/SBjNMzna/l5pmuVVKm5tdfax6VRBMlCsYylhkohoWgwlUS30fACA== x-ms-office365-filtering-correlation-id: 3d62736a-1d83-4daf-545d-08d486663077 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:DM5PR09MB1353; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(20161123560025)(20161123555025)(20161123564025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:DM5PR09MB1353; BCL:0; PCL:0; RULEID:; SRVR:DM5PR09MB1353; x-forefront-prvs: 028166BF91 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39450400003)(39840400002)(39400400002)(39410400002)(39860400002)(39850400002)(377454003)(53754006)(2950100002)(102836003)(6116002)(790700001)(3846002)(39060400002)(38730400002)(7696004)(50986999)(76176999)(6506006)(7906003)(33656002)(7736002)(74316002)(6436002)(6246003)(189998001)(606005)(9686003)(54896002)(6306002)(55016002)(99286003)(53936002)(236005)(5660300001)(229853002)(77096006)(54356999)(2501003)(3280700002)(9326002)(66066001)(3660700001)(2900100001)(86362001)(122556002)(2906002)(8676002)(81166006)(53546009)(8936002)(25786009)(19609705001); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR09MB1353; H:DM5PR09MB1354.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR09MB1354969FE7F3B67DC662A84AA5190DM5PR09MB1354namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2017 14:21:22.3074 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR09MB1353 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Apr 2017 14:21:31 -0000 --_000_DM5PR09MB1354969FE7F3B67DC662A84AA5190DM5PR09MB1354namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWRhbSwNCg0KSSB0aGluayB0aGlzIGlzIGEgZ29vZCBsaXN0IGZvciBtZSwgYnV0LCBzaG91 bGQgdGhlIGFzc2Vzc21lbnQgcmVzdWx0cyByZXBvc2l0b3J5IGJlIG1lcmdlZCBpbnRvIHRoZSBl bmRwb2ludCByZXBvc2l0b3J5Pw0KDQpUaGFua3MsDQoNCkRhbm55DQoNCkZyb206IHNhY20gW21h aWx0bzpzYWNtLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBBZGFtIE1vbnR2aWxsZQ0K U2VudDogVHVlc2RheSwgQXByaWwgMTgsIDIwMTcgOTowNCBBTQ0KVG86IHNhY21AaWV0Zi5vcmcN ClN1YmplY3Q6IFtzYWNtXSBDb21wb25lbnRzIGZvciBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQN Cg0KSGkgQWxsOg0KDQpXZSd2ZSBnb3QgYSBsaXN0IG9mIGNvbXBvbmVudHMgd2UgdGhpbmsgd2Ug Y2FyZSBhYm91dCBmb3Igb3VyIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudCBzY2VuYXJpbyAoZm9j dXNpbmcgb24gdGhlIG5hcnJvd2VzdCAiaWRlYWwgY2FzZSIgdGhyb3VnaCB0aGUgc2NlbmFyaW8g Zm9yIHRoZSB0aW1lIGJlaW5nLg0KDQpUaGVzZSBhcmU6DQoNCiogVnVsbmVyYWJpbGl0eSBEZXRl Y3Rpb24gRGF0YSBSZXBvc2l0b3J5DQoqIFZ1bG5lcmFiaWxpdHkgQXNzZXNzb3INCiogRW5kcG9p bnQgUmVwb3NpdG9yeQ0KKiBDb2xsZWN0b3INCiogVGFyZ2V0IEVuZHBvaW50DQoqIEFzc2Vzc21l bnQgUmVzdWx0cyBSZXBvc2l0b3J5DQoNCkZvciByZWZlcmVuY2UsIHNlZSBvdXIgd2lraSBbMV0g YW5kL29yIHRoZSBzbGlkZXMgZnJvbSBJRVRGIDk4IFsyXSBhbmQvb3IgdGhlIG1pbnV0ZXMgZnJv bSBJRVRGIDk4IFszXQ0KDQpRdWVzdGlvbiB0byB0aGUgV0c6IElzIHRoaXMgYW4gYXBwcm9wcmlh dGUgaW5pdGlhbCBsaXN0IG9mIGNvbXBvbmVudHM/DQoNClBsZWFzZSBvcGluZSB3aXRoaW4gdGhl IG5leHQgZmV3IGRheXMgKHNheSBieSBlbmQgb2YgeW91ciBkYXkgb24gVGh1cnNkYXksIHdoZXJl dmVyIHlvdSBtYXkgYmUpLCBzbyB0aGF0IHdlIGNhbiBnZW5lcmF0ZSBzb21lIG1vbWVudHVtIG9u IHRoaXMgZWZmb3J0Lg0KDQpLaW5kIHJlZ2FyZHMsDQoNCkFkYW0NCg0KWzFdIGh0dHBzOi8vdHJh Yy5pZXRmLm9yZy90cmFjL3NhY20vd2lraS9TYWNtVnVsbmVyYWJpbGl0eUFzc2Vzc21lbnRTY2Vu YXJpbw0KWzJdIGh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzk4L3NsaWRlcy9zbGlk ZXMtOTgtc2FjbS12dWxuZXJhYmlsaXR5LXNjZW5hcmlvLWRpc2N1c3Npb24tMDAucGRmDQpbM10g aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTgvbWludXRlcy9taW51dGVzLTk4LXNh Y20tMDAudHh0DQoNCg0K --_000_DM5PR09MB1354969FE7F3B67DC662A84AA5190DM5PR09MB1354namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8 bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGlu az0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkhpIEFkYW0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgdGhpbmsgdGhp cyBpcyBhIGdvb2QgbGlzdCBmb3IgbWUsIGJ1dCwgc2hvdWxkIHRoZSBhc3Nlc3NtZW50IHJlc3Vs dHMgcmVwb3NpdG9yeSBiZSBtZXJnZWQgaW50byB0aGUgZW5kcG9pbnQgcmVwb3NpdG9yeT88YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPlRoYW5rcyw8YnI+DQo8YnI+DQpEYW5ueTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg Ymx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBw dCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBzYWNtIFttYWlsdG86c2FjbS1ib3Vu Y2VzQGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5BZGFtIE1vbnR2aWxsZTxicj4NCjxi PlNlbnQ6PC9iPiBUdWVzZGF5LCBBcHJpbCAxOCwgMjAxNyA5OjA0IEFNPGJyPg0KPGI+VG86PC9i PiBzYWNtQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFtzYWNtXSBDb21wb25lbnRzIGZv ciBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgQWxsOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+V2UndmUgZ290IGEgbGlzdCBvZiBjb21wb25lbnRzIHdlIHRo aW5rIHdlIGNhcmUgYWJvdXQgZm9yIG91ciB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgc2NlbmFy aW8gKGZvY3VzaW5nIG9uIHRoZSBuYXJyb3dlc3QgJnF1b3Q7aWRlYWwgY2FzZSZxdW90OyB0aHJv dWdoIHRoZSBzY2VuYXJpbyBmb3IgdGhlIHRpbWUgYmVpbmcuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZXNlIGFyZTo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+KiBWdWxuZXJhYmlsaXR5 IERldGVjdGlvbiBEYXRhIFJlcG9zaXRvcnk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiogVnVsbmVyYWJpbGl0eSBBc3Nlc3NvcjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+KiBFbmRwb2ludCBSZXBv c2l0b3J5PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4qIENvbGxlY3RvcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+KiBUYXJnZXQgRW5kcG9pbnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiogQXNzZXNzbWVudCBSZXN1bHRzIFJlcG9zaXRvcnk8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIHJl ZmVyZW5jZSwgc2VlIG91ciB3aWtpIFsxXSBhbmQvb3IgdGhlIHNsaWRlcyBmcm9tIElFVEYgOTgg WzJdIGFuZC9vciB0aGUgbWludXRlcyBmcm9tIElFVEYgOTggWzNdPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlF1ZXN0aW9uIHRvIHRoZSBXRzog SXMgdGhpcyBhbiBhcHByb3ByaWF0ZSBpbml0aWFsIGxpc3Qgb2YgY29tcG9uZW50cz88bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGxlYXNlIG9w aW5lIHdpdGhpbiB0aGUgbmV4dCBmZXcgZGF5cyAoc2F5IGJ5IGVuZCBvZiB5b3VyIGRheSBvbiBU aHVyc2RheSwgd2hlcmV2ZXIgeW91IG1heSBiZSksIHNvIHRoYXQgd2UgY2FuIGdlbmVyYXRlIHNv bWUgbW9tZW50dW0gb24gdGhpcyBlZmZvcnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPktpbmQgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWRhbTxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bMV0mbmJzcDs8YSBocmVmPSJo dHRwczovL3RyYWMuaWV0Zi5vcmcvdHJhYy9zYWNtL3dpa2kvU2FjbVZ1bG5lcmFiaWxpdHlBc3Nl c3NtZW50U2NlbmFyaW8iPmh0dHBzOi8vdHJhYy5pZXRmLm9yZy90cmFjL3NhY20vd2lraS9TYWNt VnVsbmVyYWJpbGl0eUFzc2Vzc21lbnRTY2VuYXJpbzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlsyXSZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzk4L3NsaWRlcy9zbGlkZXMtOTgtc2FjbS12 dWxuZXJhYmlsaXR5LXNjZW5hcmlvLWRpc2N1c3Npb24tMDAucGRmIj5odHRwczovL3d3dy5pZXRm Lm9yZy9wcm9jZWVkaW5ncy85OC9zbGlkZXMvc2xpZGVzLTk4LXNhY20tdnVsbmVyYWJpbGl0eS1z Y2VuYXJpby1kaXNjdXNzaW9uLTAwLnBkZjwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlszXSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzk4L21pbnV0ZXMvbWludXRlcy05OC1zYWNtLTAwLnR4 dCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTgvbWludXRlcy9taW51dGVzLTk4 LXNhY20tMDAudHh0PC9hPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_DM5PR09MB1354969FE7F3B67DC662A84AA5190DM5PR09MB1354namp_-- From nobody Tue Apr 18 07:48:53 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8D7912ECA1 for ; Tue, 18 Apr 2017 07:48:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JZTtPN2QdQQz for ; Tue, 18 Apr 2017 07:48:50 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44B9B12EBFE for ; Tue, 18 Apr 2017 07:48:47 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id v3IEmiRP017771 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 18 Apr 2017 16:48:45 +0200 Received: from [134.102.161.156] (134.102.161.156) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 18 Apr 2017 16:48:39 +0200 To: "Haynes, Dan" , Adam Montville , "sacm@ietf.org" References: From: Henk Birkholz Message-ID: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> Date: Tue, 18 Apr 2017 16:48:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.161.156] Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Apr 2017 14:48:53 -0000 Hello Danny, the "Assessment Results Repository" and "Endpoint Repository" are two different components with different functions. The "Endpoint Repository" of course is the provider for the consumer that is the "Assessment Results Repository". Most certainly, both components can be running on the same endpoint or be composed in a single service that merges both components. I suppose that is what you meant? For the sake of show-casing how the architecture is working. I would recommend to start with each SACM component instantiated as a separate software component. Despite the fact that it looks simpler to just add the "Assessment Result" to the ""Endpoint Characterization Records" retained in an "Endpoint Repository". Ultimately, people will want to use existing software and Asset/Inventory Management Software is a big candidate to provide the functions of an "Endpoint Repository". In consequence, I would keep these components instantiated separately in the first iteration. What does the group think? Viele Grüße, Henk On 04/18/2017 04:21 PM, Haynes, Dan wrote: > Hi Adam, > > > > I think this is a good list for me, but, should the assessment results > repository be merged into the endpoint repository? > > Thanks, > > Danny > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam Montville > *Sent:* Tuesday, April 18, 2017 9:04 AM > *To:* sacm@ietf.org > *Subject:* [sacm] Components for Vulnerability Assessment > > > > Hi All: > > > > We've got a list of components we think we care about for our > vulnerability assessment scenario (focusing on the narrowest "ideal > case" through the scenario for the time being. > > > > These are: > > > > * Vulnerability Detection Data Repository > > * Vulnerability Assessor > > * Endpoint Repository > > * Collector > > * Target Endpoint > > * Assessment Results Repository > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > and/or the minutes from IETF 98 [3] > > > > Question to the WG: Is this an appropriate initial list of components? > > > > Please opine within the next few days (say by end of your day on > Thursday, wherever you may be), so that we can generate some momentum on > this effort. > > > > Kind regards, > > > > Adam > > > > [1] https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario > > [2] https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.pdf > > [3] https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Tue Apr 18 07:55:38 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A5E212F290 for ; Tue, 18 Apr 2017 07:55:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rHq9XutkYtXS for ; Tue, 18 Apr 2017 07:55:34 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id A86AA12EC01 for ; Tue, 18 Apr 2017 07:55:34 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 4891A6C02CA; Tue, 18 Apr 2017 10:55:43 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 3A4D66C02CD; Tue, 18 Apr 2017 10:55:43 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 18 Apr 2017 10:55:33 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Tue, 18 Apr 2017 10:55:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=SNo27t2KGV560Fr7Abc71s5kK6cFUNuJ2JAyNkWR0iY=; b=QSAuzdixQRPGO5ktkIGno1V6y0uJmEO6+rXhdx+vI0jvQQGhQN+fF4/L9z6t7ZXEjguDqKgClKxXNVDcoSG+YpCZzs9pJhhZ6OLuMWa2cbZwXX+XxpDbY2y1+1BD1cvywqEBZKViGmvH5Y4LnRi2tzsehrgH6Apofd4SqY7AJRA= Received: from DM5PR09MB1354.namprd09.prod.outlook.com (10.172.38.135) by DM5PR09MB1353.namprd09.prod.outlook.com (10.172.38.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Tue, 18 Apr 2017 14:55:27 +0000 Received: from DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) by DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) with mapi id 15.01.1034.015; Tue, 18 Apr 2017 14:55:27 +0000 From: "Haynes, Dan" To: Henk Birkholz , Adam Montville , "sacm@ietf.org" Thread-Topic: [sacm] Components for Vulnerability Assessment Thread-Index: AQHSuERo1RuKpbFar0WA/n0zX/1IM6HLLVhQgAAH2ACAAAD5UA== Date: Tue, 18 Apr 2017 14:55:27 +0000 Message-ID: References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.80.55.86] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR09MB1353; 7:Xu2amHl+Th5riXJGUyk1zrHPJeYqc5r18VyhiRF/CxydIdjE7n028bE1/yB4h5JHABXrfmRvD9Pl2vU8s/Ol8mmtX7jwPtuQXDsg9NN/IP5SqbXJEIOWuL2ZXM/2xWXNffpA9Is/Xy/dTlnT2YPt6tFz90/F5jLLB689KBjbPE818uI9TypoAtSwAW5NYSSz+2UlexMs2BqWZ9wSKNKnDriYnucRTatzDOiTwEN1So+EpZlyCSFUFYh3MYBQrxu0BjuE6HV9g70Z1D69XgviB/6yi3qouJyBW5RV57wxV3h5sQZksu3fzxFx5Xq7Nc5dhJqcpHVN68YOVvSIkagcbA== x-ms-office365-filtering-correlation-id: ff3e96de-9883-4c34-c6fe-08d4866af368 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:DM5PR09MB1353; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:DM5PR09MB1353; BCL:0; PCL:0; RULEID:; SRVR:DM5PR09MB1353; x-forefront-prvs: 028166BF91 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39840400002)(39450400003)(39400400002)(39410400002)(39850400002)(39860400002)(377454003)(53754006)(24454002)(13464003)(2950100002)(6116002)(102836003)(3846002)(39060400002)(38730400002)(7696004)(50986999)(76176999)(6506006)(33656002)(305945005)(7736002)(74316002)(6436002)(6246003)(189998001)(9686003)(6306002)(55016002)(99286003)(53936002)(5660300001)(229853002)(106356001)(77096006)(54356999)(2501003)(3280700002)(66066001)(3660700001)(2900100001)(86362001)(122556002)(2906002)(8676002)(81166006)(53546009)(8936002)(25786009); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR09MB1353; H:DM5PR09MB1354.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2017 14:55:27.3347 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR09MB1353 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Apr 2017 14:55:36 -0000 Hi Henk, The reasoning behind my comment was that in the IETF 98 notes (https://www.= ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it says: --- Per Slide 7: Q: (Adam Montville): Is the vulnerability assessor talk to the repository o= r talking directly to the collector? A: (Jessica Fitzgerald-McKay): I could see an implementer combining the col= lector and end-point repository into one. If we're treating them as functi= onal components I'm not sure we need to be that specific. A: (Dave Waltermire): We want this architecture to be de-composable. If we= treat the end-point repository as a proxy, we might be making things too c= omplicated. It might be simpler to treat the end-point repository as a data= store. A: (Adam Montville): Agreed. Q: (Dave Waltermire) Are there any concerns with separating the end-point r= epository and the collector being the component responsible for collection? A: Comment: (Adam Montville): The "results repository" will now go into the "e= nd-point repository. --- Given that, I thought there was some consensus around making that change. Thanks, Danny > -----Original Message----- > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de] > Sent: Tuesday, April 18, 2017 10:49 AM > To: Haynes, Dan ; Adam Montville > ; sacm@ietf.org > Subject: Re: [sacm] Components for Vulnerability Assessment >=20 > Hello Danny, >=20 > the "Assessment Results Repository" and "Endpoint Repository" are two > different components with different functions. The "Endpoint Repository" > of course is the provider for the consumer that is the "Assessment Result= s > Repository". >=20 > Most certainly, both components can be running on the same endpoint or be > composed in a single service that merges both components. I suppose that = is > what you meant? >=20 > For the sake of show-casing how the architecture is working. I would > recommend to start with each SACM component instantiated as a separate > software component. Despite the fact that it looks simpler to just add th= e > "Assessment Result" to the ""Endpoint Characterization Records" > retained in an "Endpoint Repository". >=20 > Ultimately, people will want to use existing software and Asset/Inventory > Management Software is a big candidate to provide the functions of an > "Endpoint Repository". In consequence, I would keep these components > instantiated separately in the first iteration. >=20 > What does the group think? >=20 > Viele Gr=FC=DFe, >=20 > Henk >=20 > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > Hi Adam, > > > > > > > > I think this is a good list for me, but, should the assessment results > > repository be merged into the endpoint repository? > > > > Thanks, > > > > Danny > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam > > Montville > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > *To:* sacm@ietf.org > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > Hi All: > > > > > > > > We've got a list of components we think we care about for our > > vulnerability assessment scenario (focusing on the narrowest "ideal > > case" through the scenario for the time being. > > > > > > > > These are: > > > > > > > > * Vulnerability Detection Data Repository > > > > * Vulnerability Assessor > > > > * Endpoint Repository > > > > * Collector > > > > * Target Endpoint > > > > * Assessment Results Repository > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > > and/or the minutes from IETF 98 [3] > > > > > > > > Question to the WG: Is this an appropriate initial list of components? > > > > > > > > Please opine within the next few days (say by end of your day on > > Thursday, wherever you may be), so that we can generate some momentum > > on this effort. > > > > > > > > Kind regards, > > > > > > > > Adam > > > > > > > > [1] > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenar > > io > > > > [2] > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabilit > > y-scenario-discussion-00.pdf > > > > [3] https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > From nobody Tue Apr 18 08:27:49 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 379AE126C0F for ; Tue, 18 Apr 2017 08:27:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYBYbhwszsyT for ; Tue, 18 Apr 2017 08:27:46 -0700 (PDT) Received: from mail-oi0-x233.google.com (mail-oi0-x233.google.com [IPv6:2607:f8b0:4003:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4240129436 for ; Tue, 18 Apr 2017 08:27:45 -0700 (PDT) Received: by mail-oi0-x233.google.com with SMTP id x184so93640848oia.1 for ; Tue, 18 Apr 2017 08:27:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=l35OjMSJJb4YerT35UKsHlOarv2/VQzmbbfinbXqOWQ=; b=thMlHA6dnHaEgLZriG5aVbWEuCyXyd8frF37Sagww/fV5DtYavyOiASBrSf9UV7EdA 5g1xvNrMRZ0P/lR5NCwvOdejn8IWvvnsRS3YhoiFPsuPm5cQTFEqwPQQis4Hr6ZFEYxr GJK98bOi1/FDFV3IrpKSRRnKaMgc5T+bcyUr5TIiacuGdEwg215Ai/m83+1GSRFpqgqy bq6nEoJKNorloRhaqKhxrEqzLOGA3/s9PX6KdjOtVah/75xeYtABDtoIKLLurtLXu5Kn OWRYtZ88Gwjw0PpxTGlKDuVjcXE3GeXitMe7J6fTricgIJLqo7Rv8Gicdm2z9i2Rti4N kD2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=l35OjMSJJb4YerT35UKsHlOarv2/VQzmbbfinbXqOWQ=; b=mkP6hTS2i3HTPAsqPQUcQVPACB7x28f+dsR2itxLa67BD812LpEnu6Dasmk6AYWFPD EJftdWxwuRaUqFrf7NsAAtlAow6KY5yq74j5TevhQ3496XFP64qXNU/IJlW8kk/Xo9ay f0d2uPGF3tKQabrRLRQ7esZbNEjhGF8KPze5iEwLJzE0U/Y7+nQGYTPTFNTL0gNHAcsG PUmYQ5txT37cunv0l3MplfmgjjejVI4Nfv2yRovnvT2VwcY/vQykuIZ9LsL6MlM6Dr0C NTtEzjS+opDI9j94i0oa36vv/CwNMfaM4ZLzo4orW3JBqJDOhw9wGKl/L1R25ejMf5BH ajKA== X-Gm-Message-State: AN3rC/4JPqtzlkZbnIjqF4/DIrzVmYXO+r51z/0sRe40RRmBWIZimDTM zQsajYZm5tX3LE1vQBEIDayYVDvjNsll X-Received: by 10.36.86.142 with SMTP id o136mr14479728itb.69.1492529264868; Tue, 18 Apr 2017 08:27:44 -0700 (PDT) MIME-Version: 1.0 References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: From: Adam Montville Date: Tue, 18 Apr 2017 15:27:34 +0000 Message-ID: To: "Haynes, Dan" , Henk Birkholz , "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a1141942aa64244054d728c63 Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Apr 2017 15:27:48 -0000 --001a1141942aa64244054d728c63 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan wrote: > Hi Henk, > > The reasoning behind my comment was that in the IETF 98 notes ( > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it says: > > --- > Per Slide 7: > Q: (Adam Montville): Is the vulnerability assessor talk to the repository > or talking directly to the collector? > A: (Jessica Fitzgerald-McKay): I could see an implementer combining the > collector and end-point repository into one. If we're treating them as > functional components I'm not sure we need to be that specific. > A: (Dave Waltermire): We want this architecture to be de-composable. If > we treat the end-point repository as a proxy, we might be making things t= oo > complicated. It might be simpler to treat the end-point repository as a > data store. > A: (Adam Montville): Agreed. > > Q: (Dave Waltermire) Are there any concerns with separating the end-point > repository and the collector being the component responsible for collecti= on? > A: > > Comment: (Adam Montville): The "results repository" will now go into the > "end-point repository. > --- > > Given that, I thought there was some consensus around making that change. > Hm... FWIW, I don't feel I would have said that as a personal opinion, but maybe that there was some agreement in the room. Of course, the list is what counts. Without a chair hat on, I happen to agree with Henk. What we are calling components are "compose-able function groups" in some sense, and that they should be treated separately, but are likely to be implemented in some composed manner. > > Thanks, > > Danny > > > -----Original Message----- > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de] > > Sent: Tuesday, April 18, 2017 10:49 AM > > To: Haynes, Dan ; Adam Montville > > ; sacm@ietf.org > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > Hello Danny, > > > > the "Assessment Results Repository" and "Endpoint Repository" are two > > different components with different functions. The "Endpoint Repository= " > > of course is the provider for the consumer that is the "Assessment > Results > > Repository". > > > > Most certainly, both components can be running on the same endpoint or = be > > composed in a single service that merges both components. I suppose tha= t > is > > what you meant? > > > > For the sake of show-casing how the architecture is working. I would > > recommend to start with each SACM component instantiated as a separate > > software component. Despite the fact that it looks simpler to just add > the > > "Assessment Result" to the ""Endpoint Characterization Records" > > retained in an "Endpoint Repository". > > > > Ultimately, people will want to use existing software and Asset/Invento= ry > > Management Software is a big candidate to provide the functions of an > > "Endpoint Repository". In consequence, I would keep these components > > instantiated separately in the first iteration. > > > > What does the group think? > > > > Viele Gr=C3=BC=C3=9Fe, > > > > Henk > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > Hi Adam, > > > > > > > > > > > > I think this is a good list for me, but, should the assessment result= s > > > repository be merged into the endpoint repository? > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam > > > Montville > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > *To:* sacm@ietf.org > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > Hi All: > > > > > > > > > > > > We've got a list of components we think we care about for our > > > vulnerability assessment scenario (focusing on the narrowest "ideal > > > case" through the scenario for the time being. > > > > > > > > > > > > These are: > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > * Vulnerability Assessor > > > > > > * Endpoint Repository > > > > > > * Collector > > > > > > * Target Endpoint > > > > > > * Assessment Results Repository > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of components= ? > > > > > > > > > > > > Please opine within the next few days (say by end of your day on > > > Thursday, wherever you may be), so that we can generate some momentum > > > on this effort. > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > Adam > > > > > > > > > > > > [1] > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScena= r > > > io > > > > > > [2] > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabili= t > > > y-scenario-discussion-00.pdf > > > > > > [3] https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.tx= t > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > --001a1141942aa64244054d728c63 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan <dhaynes@mitre.org> wrote:
<= /div>
Hi Henk,

The reasoning behind my comment was that in the IETF 98 notes (https://www.ietf.org/proceedings/98/minutes/minute= s-98-sacm-00) it says:

---
Per Slide 7:
Q: (Adam Montville): Is the vulnerability assessor talk to the repository o= r talking directly to the collector?
A: (Jessica Fitzgerald-McKay): I could see an implementer combining the col= lector and end-point repository into one.=C2=A0 If we're treating them = as functional components I'm not sure we need to be that specific.
A: (Dave Waltermire): We want this architecture to be de-composable.=C2=A0 = If we treat the end-point repository as a proxy, we might be making things = too complicated. It might be simpler to treat the end-point repository as a= data store.
A: (Adam Montville): Agreed.

Q: (Dave Waltermire) Are there any concerns with separating the end-point r= epository and the collector being the component responsible for collection?=
A: <no response>

Comment: (Adam Montville): The "results repository" will now go i= nto the "end-point repository.
---

Given that, I thought there was some consensus around making that change.

Hm...=C2=A0 FWIW, I don't feel = I would have said that as a personal opinion, but maybe that there was some= agreement in the room.=C2=A0 Of course, the list is what counts.

Without a chair hat on, I happen to agree with Henk. What w= e are calling components are "compose-able function groups" in so= me sense, and that they should be treated separately, but are likely to be = implemented in some composed manner.

=C2=A0<= /div>

Thanks,

Danny

> -----Original Message-----
> From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de]
> Sent: Tuesday, April 18, 2017 10:49 AM
> To: Haynes, Dan <dhaynes@mitre.org>; Adam Montville
> <ad= am.w.montville@gmail.com>; sacm@ietf.org
> Subject: Re: [sacm] Components for Vulnerability Assessment
>
> Hello Danny,
>
> the "Assessment Results Repository" and "Endpoint Repos= itory" are two
> different components with different functions. The "Endpoint Repo= sitory"
> of course is the provider for the consumer that is the "Assessmen= t Results
> Repository".
>
> Most certainly, both components can be running on the same endpoint or= be
> composed in a single service that merges both components. I suppose th= at is
> what you meant?
>
> For the sake of show-casing how the architecture is working. I would > recommend to start with each SACM component instantiated as a separate=
> software component. Despite the fact that it looks simpler to just add= the
> "Assessment Result" to the ""Endpoint Characteriza= tion Records"
> retained in an "Endpoint Repository".
>
> Ultimately, people will want to use existing software and Asset/Invent= ory
> Management Software is a big candidate to provide the functions of an<= br> > "Endpoint Repository". In consequence, I would keep these co= mponents
> instantiated separately in the first iteration.
>
> What does the group think?
>
> Viele Gr=C3=BC=C3=9Fe,
>
> Henk
>
> On 04/18/2017 04:21 PM, Haynes, Dan wrote:
> > Hi Adam,
> >
> >
> >
> > I think this is a good list for me, but, should the assessment re= sults
> > repository be merged into the endpoint repository?
> >
> > Thanks,
> >
> > Danny
> >
> >
> >
> > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam
> > Montville
> > *Sent:* Tuesday, April 18, 2017 9:04 AM
> > *To:* sacm@iet= f.org
> > *Subject:* [sacm] Components for Vulnerability Assessment
> >
> >
> >
> > Hi All:
> >
> >
> >
> > We've got a list of components we think we care about for our=
> > vulnerability assessment scenario (focusing on the narrowest &quo= t;ideal
> > case" through the scenario for the time being.
> >
> >
> >
> > These are:
> >
> >
> >
> > * Vulnerability Detection Data Repository
> >
> > * Vulnerability Assessor
> >
> > * Endpoint Repository
> >
> > * Collector
> >
> > * Target Endpoint
> >
> > * Assessment Results Repository
> >
> >
> >
> > For reference, see our wiki [1] and/or the slides from IETF 98 [2= ]
> > and/or the minutes from IETF 98 [3]
> >
> >
> >
> > Question to the WG: Is this an appropriate initial list of compon= ents?
> >
> >
> >
> > Please opine within the next few days (say by end of your day on<= br> > > Thursday, wherever you may be), so that we can generate some mome= ntum
> > on this effort.
> >
> >
> >
> > Kind regards,
> >
> >
> >
> > Adam
> >
> >
> >
> > [1]
> > https://trac.ietf.or= g/trac/sacm/wiki/SacmVulnerabilityAssessmentScenar
> > io
> >
> > [2]
> > https://www.ietf.org= /proceedings/98/slides/slides-98-sacm-vulnerabilit
> > y-scenario-discussion-00.pdf
> >
> > [3] https://www.ietf.org= /proceedings/98/minutes/minutes-98-sacm-00.txt
> >
> >
> >
> >
> >
> >
> >
> > _______________________________________________
> > sacm mailing list
> > sacm@ietf.org<= /a>
> > https://www.ietf.org/mailman/listinfo/sacm > >
--001a1141942aa64244054d728c63-- From nobody Tue Apr 18 22:47:51 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38FF4131514 for ; Tue, 18 Apr 2017 22:47:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qa1QTy0JEVEn for ; Tue, 18 Apr 2017 22:47:47 -0700 (PDT) Received: from fmail2.hs-bremen.de (fmail2.hs-bremen.de [IPv6:2001:638:703:2::15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8294A131513 for ; Tue, 18 Apr 2017 22:47:47 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by fmail2.hs-bremen.de (Postfix) with ESMTP id 8BB0D27920 for ; Wed, 19 Apr 2017 07:47:45 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at fmail2.hs-bremen.de Received: from fmail2.hs-bremen.de ([127.0.0.1]) by localhost (fmail2.hs-bremen.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UnazACAJ4Zm5 for ; Wed, 19 Apr 2017 07:47:44 +0200 (CEST) Received: from mail.hs-bremen.de (mail.hs-bremen.de [194.94.24.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.hs-bremen.de", Issuer "Hochschule Bremen CA 1" (verified OK)) by fmail2.hs-bremen.de (Postfix) with ESMTPS id 8E4B627913 for ; Wed, 19 Apr 2017 07:47:44 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail.hs-bremen.de (Postfix) with ESMTP id 7931C311BA for ; Wed, 19 Apr 2017 07:47:44 +0200 (CEST) X-Virus-Scanned: by amavisd-new at mail.hs-bremen.de Received: from mail.hs-bremen.de ([127.0.0.1]) by localhost (mail.hs-bremen.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SQ9mtJC4L5h1 for ; Wed, 19 Apr 2017 07:47:43 +0200 (CEST) Received: from [172.24.16.90] (x55b358e2.dyn.telefonica.de [85.179.88.226]) (Authenticated sender: cagenzel) by mail.hs-bremen.de (Postfix) with ESMTPSA id 2A010311B7 for ; Wed, 19 Apr 2017 07:47:43 +0200 (CEST) To: sacm@ietf.org References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> From: Carl-Heinz Genzel Message-ID: Date: Wed, 19 Apr 2017 07:47:41 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 05:47:50 -0000 Hello All, The comment mentioned by Danny becomes obsolete in the next section "Per slide 8", where it seems to me that it is agreed upon to not combine the repositories. However, I wasn't there. Best Regards, Carl-Heinz Genzel Am 18.04.2017 um 17:27 schrieb Adam Montville: > > > On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan > wrote: > > Hi Henk, > > The reasoning behind my comment was that in the IETF 98 notes > (https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it > says: > > --- > Per Slide 7: > Q: (Adam Montville): Is the vulnerability assessor talk to the > repository or talking directly to the collector? > A: (Jessica Fitzgerald-McKay): I could see an implementer combining > the collector and end-point repository into one. If we're treating > them as functional components I'm not sure we need to be that specific. > A: (Dave Waltermire): We want this architecture to be > de-composable. If we treat the end-point repository as a proxy, we > might be making things too complicated. It might be simpler to treat > the end-point repository as a data store. > A: (Adam Montville): Agreed. > > Q: (Dave Waltermire) Are there any concerns with separating the > end-point repository and the collector being the component > responsible for collection? > A: > > Comment: (Adam Montville): The "results repository" will now go into > the "end-point repository. > --- > > Given that, I thought there was some consensus around making that > change. > > > Hm... FWIW, I don't feel I would have said that as a personal opinion, > but maybe that there was some agreement in the room. Of course, the > list is what counts. > > Without a chair hat on, I happen to agree with Henk. What we are calling > components are "compose-able function groups" in some sense, and that > they should be treated separately, but are likely to be implemented in > some composed manner. > > > > > Thanks, > > Danny > > > -----Original Message----- > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de > ] > > Sent: Tuesday, April 18, 2017 10:49 AM > > To: Haynes, Dan >; > Adam Montville > > >; > sacm@ietf.org > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > Hello Danny, > > > > the "Assessment Results Repository" and "Endpoint Repository" are two > > different components with different functions. The "Endpoint > Repository" > > of course is the provider for the consumer that is the "Assessment > Results > > Repository". > > > > Most certainly, both components can be running on the same > endpoint or be > > composed in a single service that merges both components. I > suppose that is > > what you meant? > > > > For the sake of show-casing how the architecture is working. I would > > recommend to start with each SACM component instantiated as a separate > > software component. Despite the fact that it looks simpler to just > add the > > "Assessment Result" to the ""Endpoint Characterization Records" > > retained in an "Endpoint Repository". > > > > Ultimately, people will want to use existing software and > Asset/Inventory > > Management Software is a big candidate to provide the functions of an > > "Endpoint Repository". In consequence, I would keep these components > > instantiated separately in the first iteration. > > > > What does the group think? > > > > Viele Grüße, > > > > Henk > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > Hi Adam, > > > > > > > > > > > > I think this is a good list for me, but, should the assessment > results > > > repository be merged into the endpoint repository? > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org > ] *On Behalf Of *Adam > > > Montville > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > *To:* sacm@ietf.org > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > Hi All: > > > > > > > > > > > > We've got a list of components we think we care about for our > > > vulnerability assessment scenario (focusing on the narrowest "ideal > > > case" through the scenario for the time being. > > > > > > > > > > > > These are: > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > * Vulnerability Assessor > > > > > > * Endpoint Repository > > > > > > * Collector > > > > > > * Target Endpoint > > > > > > * Assessment Results Repository > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of > components? > > > > > > > > > > > > Please opine within the next few days (say by end of your day on > > > Thursday, wherever you may be), so that we can generate some > momentum > > > on this effort. > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > Adam > > > > > > > > > > > > [1] > > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenar > > > io > > > > > > [2] > > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabilit > > > y-scenario-discussion-00.pdf > > > > > > [3] > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > -- ______________________________________________________________________________________ Carl-Heinz Genzel Wissenschaftlicher Mitarbeiter Rechnernetze / Informationssicherheit Institut für Informatik und Automation Hochschule Bremen / University of Applied Sciences Flughafenallee 10, 28199 Bremen, Germany tel.: +49 421 5905 5442 mobil: +49 179 1636844 email: carl-heinz.genzel@hs-bremen.de ___________________________________________________________________________ From nobody Tue Apr 18 22:50:45 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80BFE131514 for ; Tue, 18 Apr 2017 22:50:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.107 X-Spam-Level: X-Spam-Status: No, score=-1.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y8b3idvFU934 for ; Tue, 18 Apr 2017 22:50:41 -0700 (PDT) Received: from kfu.edu.sa (unknown [89.237.149.225]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CE3D120724 for ; Tue, 18 Apr 2017 22:50:39 -0700 (PDT) Received: from EXSRV2.EKFU.LOCAL (unknown) by MEG01.ekfu.local with smtp id 5dbb_00fd_e2f6ed77_44a2_4c36_8fd2_e1b9e36413f3; Wed, 19 Apr 2017 08:50:14 +0300 Received: from EXSRV2.EKFU.LOCAL (192.168.6.66) by EXSRV2.EKFU.LOCAL (192.168.6.66) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 19 Apr 2017 08:50:09 +0300 Received: from EXSRV2.EKFU.LOCAL ([fe80::6c7a:98e:167a:c815]) by EXSRV2.EKFU.LOCAL ([fe80::6c7a:98e:167a:c815%20]) with mapi id 15.00.1130.005; Wed, 19 Apr 2017 08:50:09 +0300 From: Muhammad Nasir Mumtaz Bhutta To: "Haynes, Dan" , Henk Birkholz , Adam Montville , "sacm@ietf.org" Thread-Topic: [sacm] Components for Vulnerability Assessment Thread-Index: AQHSuERKq0pCGcuZGk6T1IeeVl6ke6HK+0gAgAAHngCAAAHogIABKyhA Date: Wed, 19 Apr 2017 05:50:08 +0000 Message-ID: References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.137.28.234] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 05:50:44 -0000 Hi every one,=20 I have joined this group recently and want to know more about the discussio= n topic. It looks like some architecture is being discussed in the thread.= =20 >From where should I get more information about this so that I can participa= te and contribute my thoughts as well.=20 Thanks.=20 Regards, =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Muhammad Nasir Mumtaz Bhutta, PhD Assistant Professor, Information Systems Dept College of Computer Sciences and Information Technology King Faisal University Saudi Arabia=20 Alahssa 31982 P.O. Box 400 Tel=A0 + 966 (013) 589 9207 Fax + 966 (013) 589 9236 -----Original Message----- From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, April 18, 2017 5:55 PM To: Henk Birkholz ; Adam Montville ; sacm@ietf.org Subject: Re: [sacm] Components for Vulnerability Assessment Hi Henk, The reasoning behind my comment was that in the IETF 98 notes (https://www.= ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it says: --- Per Slide 7: Q: (Adam Montville): Is the vulnerability assessor talk to the repository o= r talking directly to the collector? A: (Jessica Fitzgerald-McKay): I could see an implementer combining the col= lector and end-point repository into one. If we're treating them as functi= onal components I'm not sure we need to be that specific. A: (Dave Waltermire): We want this architecture to be de-composable. If we= treat the end-point repository as a proxy, we might be making things too c= omplicated. It might be simpler to treat the end-point repository as a data= store. A: (Adam Montville): Agreed. Q: (Dave Waltermire) Are there any concerns with separating the end-point r= epository and the collector being the component responsible for collection? A: Comment: (Adam Montville): The "results repository" will now go into the "e= nd-point repository. --- Given that, I thought there was some consensus around making that change. Thanks, Danny > -----Original Message----- > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de] > Sent: Tuesday, April 18, 2017 10:49 AM > To: Haynes, Dan ; Adam Montville=20 > ; sacm@ietf.org > Subject: Re: [sacm] Components for Vulnerability Assessment >=20 > Hello Danny, >=20 > the "Assessment Results Repository" and "Endpoint Repository" are two=20 > different components with different functions. The "Endpoint Repository" > of course is the provider for the consumer that is the "Assessment=20 > Results Repository". >=20 > Most certainly, both components can be running on the same endpoint or=20 > be composed in a single service that merges both components. I suppose=20 > that is what you meant? >=20 > For the sake of show-casing how the architecture is working. I would=20 > recommend to start with each SACM component instantiated as a separate=20 > software component. Despite the fact that it looks simpler to just add=20 > the "Assessment Result" to the ""Endpoint Characterization Records" > retained in an "Endpoint Repository". >=20 > Ultimately, people will want to use existing software and=20 > Asset/Inventory Management Software is a big candidate to provide the=20 > functions of an "Endpoint Repository". In consequence, I would keep=20 > these components instantiated separately in the first iteration. >=20 > What does the group think? >=20 > Viele Gr=FC=DFe, >=20 > Henk >=20 > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > Hi Adam, > > > > > > > > I think this is a good list for me, but, should the assessment=20 > > results repository be merged into the endpoint repository? > > > > Thanks, > > > > Danny > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam=20 > > Montville > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > *To:* sacm@ietf.org > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > Hi All: > > > > > > > > We've got a list of components we think we care about for our=20 > > vulnerability assessment scenario (focusing on the narrowest "ideal=20 > > case" through the scenario for the time being. > > > > > > > > These are: > > > > > > > > * Vulnerability Detection Data Repository > > > > * Vulnerability Assessor > > > > * Endpoint Repository > > > > * Collector > > > > * Target Endpoint > > > > * Assessment Results Repository > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2]=20 > > and/or the minutes from IETF 98 [3] > > > > > > > > Question to the WG: Is this an appropriate initial list of components? > > > > > > > > Please opine within the next few days (say by end of your day on=20 > > Thursday, wherever you may be), so that we can generate some=20 > > momentum on this effort. > > > > > > > > Kind regards, > > > > > > > > Adam > > > > > > > > [1] > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScen > > ar > > io > > > > [2] > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabil > > it > > y-scenario-discussion-00.pdf > > > > [3]=20 > > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm From nobody Wed Apr 19 05:34:25 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A632E12953B for ; Wed, 19 Apr 2017 05:34:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZB2W5kNRo6cS for ; Wed, 19 Apr 2017 05:34:21 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 8C0AF127077 for ; Wed, 19 Apr 2017 05:34:14 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 639D96C0125; Wed, 19 Apr 2017 08:34:23 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 540596C00AF; Wed, 19 Apr 2017 08:34:23 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Wed, 19 Apr 2017 08:34:14 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Wed, 19 Apr 2017 08:34:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=MDCdsSFU8ljrIwLBnT6G4OQtBFnc8gqy1bmKZaidPHY=; b=XAzgFdAf629SMcjEfiH7VGTNZkEdeuRMQhieifGzwaGqWHwVhTFv9fbt1dPFSgdMePrspoxIndvOqkfe+VeRpi80uuSTI2tzhyZ20Zd2HjlKWw2H2PBhFcxuLqI6yruq17YCaMj4ucfsI9B3+L/hVSqG0YKhz6PPX+/QKG687IQ= Received: from CY4PR09MB1351.namprd09.prod.outlook.com (10.172.67.9) by CY4PR09MB1352.namprd09.prod.outlook.com (10.172.67.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Wed, 19 Apr 2017 12:34:12 +0000 Received: from CY4PR09MB1351.namprd09.prod.outlook.com ([10.172.67.9]) by CY4PR09MB1351.namprd09.prod.outlook.com ([10.172.67.9]) with mapi id 15.01.1034.015; Wed, 19 Apr 2017 12:34:11 +0000 From: "Haynes, Dan" To: Muhammad Nasir Mumtaz Bhutta , Henk Birkholz , Adam Montville , "sacm@ietf.org" Thread-Topic: [sacm] Components for Vulnerability Assessment Thread-Index: AQHSuERo1RuKpbFar0WA/n0zX/1IM6HLLVhQgAAH2ACAAAD5UIAA+ugAgABwBXA= Date: Wed, 19 Apr 2017 12:34:11 +0000 Message-ID: References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: kfu.edu.sa; dkim=none (message not signed) header.d=none;kfu.edu.sa; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.80.55.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR09MB1352; 7:PkoB86W9iNirrHIdBMPzH1J+Yaod3S++njPill68JF/MzIWbFmT/Kv6ELoVwEEzrxi6CiPtMXOAehapiEePAdq+GFf+83BCc3vf7WW1Z7rCMFk++KD92k+W6dmnLF4YwzP9/2YD252u5S4g8zuQMJvysrt4T6L/8xTvp0rCJRFOc9CEoK93El7yI6TI9c+RwunYqnFuitF2ubk+UP0CNWdTLbQcmLPs1R4318G+yiFqXGh1Nk+MlcMdpxsLynp5BpWDT/xyziu83DomtlM/9BRFZsz5wtCCRhgMUUSPzLH+d2TB+3mts3UHXbowWN/PTAUbaP8/zL5HO8iRjH7xHdw== x-ms-office365-filtering-correlation-id: 9c18e59c-546c-4f0a-28ed-08d4872061f0 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:CY4PR09MB1352; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(20161123564025)(20161123562025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:CY4PR09MB1352; BCL:0; PCL:0; RULEID:; SRVR:CY4PR09MB1352; x-forefront-prvs: 028256169F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39410400002)(39450400003)(39860400002)(39400400002)(39840400002)(39850400002)(24454002)(53754006)(377454003)(129404003)(13464003)(2950100002)(93886004)(6246003)(122556002)(7736002)(77096006)(6436002)(81166006)(74316002)(8676002)(8936002)(3280700002)(53936002)(55016002)(305945005)(86362001)(66066001)(99286003)(6306002)(5660300001)(2171002)(9686003)(2501003)(3660700001)(54356999)(76176999)(6506006)(39060400002)(2900100001)(3846002)(2906002)(38730400002)(189998001)(6116002)(25786009)(53546009)(33656002)(229853002)(102836003)(7696004)(50986999); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR09MB1352; H:CY4PR09MB1351.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2017 12:34:11.6693 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR09MB1352 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 12:34:24 -0000 Hi Muhammad, You will want to check out the Vulnerability Assessment Scenario first whic= h can be found here (https://trac.ietf.org/trac/sacm/wiki/SacmVulnerability= AssessmentScenario). You can also find additional information in this threa= d (https://www.ietf.org/mail-archive/web/sacm/current/msg04698.html). Hope this helps! Thanks, Danny > -----Original Message----- > From: Muhammad Nasir Mumtaz Bhutta [mailto:mmbhutta@kfu.edu.sa] > Sent: Wednesday, April 19, 2017 1:50 AM > To: Haynes, Dan ; Henk Birkholz > ; Adam Montville > ; sacm@ietf.org > Subject: RE: [sacm] Components for Vulnerability Assessment >=20 > Hi every one, > I have joined this group recently and want to know more about the discuss= ion > topic. It looks like some architecture is being discussed in the thread. >=20 > From where should I get more information about this so that I can partici= pate > and contribute my thoughts as well. >=20 > Thanks. >=20 >=20 > Regards, > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Muhammad Nasir Mumtaz Bhutta, PhD > Assistant Professor, > Information Systems Dept > College of Computer Sciences and Information Technology King Faisal Unive= rsity > Saudi Arabia Alahssa 31982 P.O. Box 400 Tel=A0 + 966 (013) 589 9207 Fax += 966 > (013) 589 9236 >=20 >=20 >=20 > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan > Sent: Tuesday, April 18, 2017 5:55 PM > To: Henk Birkholz ; Adam Montville > ; sacm@ietf.org > Subject: Re: [sacm] Components for Vulnerability Assessment >=20 > Hi Henk, >=20 > The reasoning behind my comment was that in the IETF 98 notes > (https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it says: >=20 > --- > Per Slide 7: > Q: (Adam Montville): Is the vulnerability assessor talk to the repository= or talking > directly to the collector? > A: (Jessica Fitzgerald-McKay): I could see an implementer combining the > collector and end-point repository into one. If we're treating them as f= unctional > components I'm not sure we need to be that specific. > A: (Dave Waltermire): We want this architecture to be de-composable. If = we > treat the end-point repository as a proxy, we might be making things too > complicated. It might be simpler to treat the end-point repository as a d= ata > store. > A: (Adam Montville): Agreed. >=20 > Q: (Dave Waltermire) Are there any concerns with separating the end-point > repository and the collector being the component responsible for collecti= on? > A: >=20 > Comment: (Adam Montville): The "results repository" will now go into the = "end- > point repository. > --- >=20 > Given that, I thought there was some consensus around making that change. >=20 > Thanks, >=20 > Danny >=20 > > -----Original Message----- > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de] > > Sent: Tuesday, April 18, 2017 10:49 AM > > To: Haynes, Dan ; Adam Montville > > ; sacm@ietf.org > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > Hello Danny, > > > > the "Assessment Results Repository" and "Endpoint Repository" are two > > different components with different functions. The "Endpoint Repository= " > > of course is the provider for the consumer that is the "Assessment > > Results Repository". > > > > Most certainly, both components can be running on the same endpoint or > > be composed in a single service that merges both components. I suppose > > that is what you meant? > > > > For the sake of show-casing how the architecture is working. I would > > recommend to start with each SACM component instantiated as a separate > > software component. Despite the fact that it looks simpler to just add > > the "Assessment Result" to the ""Endpoint Characterization Records" > > retained in an "Endpoint Repository". > > > > Ultimately, people will want to use existing software and > > Asset/Inventory Management Software is a big candidate to provide the > > functions of an "Endpoint Repository". In consequence, I would keep > > these components instantiated separately in the first iteration. > > > > What does the group think? > > > > Viele Gr=FC=DFe, > > > > Henk > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > Hi Adam, > > > > > > > > > > > > I think this is a good list for me, but, should the assessment > > > results repository be merged into the endpoint repository? > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam > > > Montville > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > *To:* sacm@ietf.org > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > Hi All: > > > > > > > > > > > > We've got a list of components we think we care about for our > > > vulnerability assessment scenario (focusing on the narrowest "ideal > > > case" through the scenario for the time being. > > > > > > > > > > > > These are: > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > * Vulnerability Assessor > > > > > > * Endpoint Repository > > > > > > * Collector > > > > > > * Target Endpoint > > > > > > * Assessment Results Repository > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of components= ? > > > > > > > > > > > > Please opine within the next few days (say by end of your day on > > > Thursday, wherever you may be), so that we can generate some > > > momentum on this effort. > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > Adam > > > > > > > > > > > > [1] > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScen > > > ar > > > io > > > > > > [2] > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabil > > > it > > > y-scenario-discussion-00.pdf > > > > > > [3] > > > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Wed Apr 19 05:36:09 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD57B126DC2 for ; Wed, 19 Apr 2017 05:36:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lo4qf0SmI4cE for ; Wed, 19 Apr 2017 05:36:05 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 55DB9129522 for ; Wed, 19 Apr 2017 05:36:05 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 7373E6C0100; Wed, 19 Apr 2017 08:36:14 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 654A96C0089; Wed, 19 Apr 2017 08:36:14 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Wed, 19 Apr 2017 08:36:04 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Wed, 19 Apr 2017 08:36:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=515uD61cZVH2GfBiuZN7RxWXN/PGnUdHB0zBStmjGBI=; b=E2F839QQgQzIqUbseAcAcdlEoIKdb8NFoR40J6pp0fhhdpxe7L4p1Yg4dy6exzqQVkCKFYus8i1JutDze7olQM1j2xNtqDaaVe6HDVlSryganAqST9R0dc1krO1rsSqUlre1VdTKQ4+GoqJqWClN4ZlcWWuNaFa44higoMLrxI8= Received: from CY4PR09MB1351.namprd09.prod.outlook.com (10.172.67.9) by CY4PR09MB1352.namprd09.prod.outlook.com (10.172.67.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Wed, 19 Apr 2017 12:36:03 +0000 Received: from CY4PR09MB1351.namprd09.prod.outlook.com ([10.172.67.9]) by CY4PR09MB1351.namprd09.prod.outlook.com ([10.172.67.9]) with mapi id 15.01.1034.015; Wed, 19 Apr 2017 12:36:03 +0000 From: "Haynes, Dan" To: Carl-Heinz Genzel , "sacm@ietf.org" Thread-Topic: [sacm] Components for Vulnerability Assessment Thread-Index: AQHSuERo1RuKpbFar0WA/n0zX/1IM6HLLVhQgAAH2ACAAAD5UIAACegAgADwUYCAAHGaUA== Date: Wed, 19 Apr 2017 12:36:03 +0000 Message-ID: References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: hs-bremen.de; dkim=none (message not signed) header.d=none;hs-bremen.de; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.80.55.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR09MB1352; 7:F4prBbfZw+APLUyJusjc+t2aeX3OMMZNJ0r7ahL82pmelILB65ep2diLzyOAEgy/yx7Xx1iMSFgrzE5v4SAM/bEDv/5vyPUfk8PHr9eUoYfKz/rIPWNomOAg+tVwLw3qwNX0FeckUJUntsOZX0slE/eS8vsE812Dvmg8AMTXaPRQSjKRVcHtoKOn4lNnJJOtv811+zX9TLeykDgt5L/nXWDtCo8u1qGVV8UGOnU+7fw+VgRb3fMOq9Pv8KqotCUWJ3/5LUvtwcoTCG24oakZi4zeExhe1KEOPBBtM8aIEEubOZmcgOmKgsmTpOVRluq4G+ukhh8XduqH4XNvcQ1qnQ== x-ms-office365-filtering-correlation-id: 32b463e4-f092-4e72-e3ca-08d48720a463 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:CY4PR09MB1352; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(20161123564025)(20161123562025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:CY4PR09MB1352; BCL:0; PCL:0; RULEID:; SRVR:CY4PR09MB1352; x-forefront-prvs: 028256169F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39410400002)(39450400003)(39860400002)(39400400002)(39840400002)(39850400002)(24454002)(53754006)(377454003)(252514010)(13464003)(2950100002)(93886004)(122556002)(7736002)(77096006)(6436002)(81166006)(74316002)(8676002)(8936002)(3280700002)(53936002)(55016002)(305945005)(86362001)(66066001)(99286003)(6306002)(5660300001)(9686003)(2501003)(3660700001)(54356999)(76176999)(6506006)(2900100001)(3846002)(2906002)(38730400002)(189998001)(6116002)(25786009)(53546009)(33656002)(229853002)(102836003)(7696004)(50986999); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR09MB1352; H:CY4PR09MB1351.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2017 12:36:03.1124 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR09MB1352 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 12:36:08 -0000 Thanks Carl-Heinz, it looks like I missed that. With that said, I will kee= p quiet and let someone who was there clarify :). Thanks, Danny > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Carl-Heinz Genzel > Sent: Wednesday, April 19, 2017 1:48 AM > To: sacm@ietf.org > Subject: Re: [sacm] Components for Vulnerability Assessment >=20 > Hello All, >=20 > The comment mentioned by Danny becomes obsolete in the next section "Per > slide 8", where it seems to me that it is agreed upon to not combine the > repositories. However, I wasn't there. >=20 > Best Regards, > Carl-Heinz Genzel >=20 > Am 18.04.2017 um 17:27 schrieb Adam Montville: > > > > > > On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan > > wrote: > > > > Hi Henk, > > > > The reasoning behind my comment was that in the IETF 98 notes > > (https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it > > says: > > > > --- > > Per Slide 7: > > Q: (Adam Montville): Is the vulnerability assessor talk to the > > repository or talking directly to the collector? > > A: (Jessica Fitzgerald-McKay): I could see an implementer combining > > the collector and end-point repository into one. If we're treating > > them as functional components I'm not sure we need to be that speci= fic. > > A: (Dave Waltermire): We want this architecture to be > > de-composable. If we treat the end-point repository as a proxy, we > > might be making things too complicated. It might be simpler to trea= t > > the end-point repository as a data store. > > A: (Adam Montville): Agreed. > > > > Q: (Dave Waltermire) Are there any concerns with separating the > > end-point repository and the collector being the component > > responsible for collection? > > A: > > > > Comment: (Adam Montville): The "results repository" will now go int= o > > the "end-point repository. > > --- > > > > Given that, I thought there was some consensus around making that > > change. > > > > > > Hm... FWIW, I don't feel I would have said that as a personal > > opinion, but maybe that there was some agreement in the room. Of > > course, the list is what counts. > > > > Without a chair hat on, I happen to agree with Henk. What we are > > calling components are "compose-able function groups" in some sense, > > and that they should be treated separately, but are likely to be > > implemented in some composed manner. > > > > > > > > > > Thanks, > > > > Danny > > > > > -----Original Message----- > > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de > > ] > > > Sent: Tuesday, April 18, 2017 10:49 AM > > > To: Haynes, Dan >; > > Adam Montville > > > >; > > sacm@ietf.org > > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > > > Hello Danny, > > > > > > the "Assessment Results Repository" and "Endpoint Repository" are= two > > > different components with different functions. The "Endpoint > > Repository" > > > of course is the provider for the consumer that is the "Assessmen= t > > Results > > > Repository". > > > > > > Most certainly, both components can be running on the same > > endpoint or be > > > composed in a single service that merges both components. I > > suppose that is > > > what you meant? > > > > > > For the sake of show-casing how the architecture is working. I wo= uld > > > recommend to start with each SACM component instantiated as a > separate > > > software component. Despite the fact that it looks simpler to jus= t > > add the > > > "Assessment Result" to the ""Endpoint Characterization Records" > > > retained in an "Endpoint Repository". > > > > > > Ultimately, people will want to use existing software and > > Asset/Inventory > > > Management Software is a big candidate to provide the functions o= f an > > > "Endpoint Repository". In consequence, I would keep these compone= nts > > > instantiated separately in the first iteration. > > > > > > What does the group think? > > > > > > Viele Gr=FC=DFe, > > > > > > Henk > > > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > > Hi Adam, > > > > > > > > > > > > > > > > I think this is a good list for me, but, should the assessment > > results > > > > repository be merged into the endpoint repository? > > > > > > > > Thanks, > > > > > > > > Danny > > > > > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org > > ] *On Behalf Of *Adam > > > > Montville > > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > > *To:* sacm@ietf.org > > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > > > > > Hi All: > > > > > > > > > > > > > > > > We've got a list of components we think we care about for our > > > > vulnerability assessment scenario (focusing on the narrowest "i= deal > > > > case" through the scenario for the time being. > > > > > > > > > > > > > > > > These are: > > > > > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > > > * Vulnerability Assessor > > > > > > > > * Endpoint Repository > > > > > > > > * Collector > > > > > > > > * Target Endpoint > > > > > > > > * Assessment Results Repository > > > > > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 = [2] > > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of > > components? > > > > > > > > > > > > > > > > Please opine within the next few days (say by end of your day o= n > > > > Thursday, wherever you may be), so that we can generate some > > momentum > > > > on this effort. > > > > > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > > > > > Adam > > > > > > > > > > > > > > > > [1] > > > > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentSce= nar > > > > io > > > > > > > > [2] > > > > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabi= lit > > > > y-scenario-discussion-00.pdf > > > > > > > > [3] > > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > sacm mailing list > > > > sacm@ietf.org > > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > >=20 > -- > _________________________________________________________________ > _____________________ >=20 > Carl-Heinz Genzel > Wissenschaftlicher Mitarbeiter > Rechnernetze / Informationssicherheit > Institut f=FCr Informatik und Automation > Hochschule Bremen / University of Applied Sciences Flughafenallee 10, 281= 99 > Bremen, Germany > tel.: +49 421 5905 5442 > mobil: +49 179 1636844 > email: carl-heinz.genzel@hs-bremen.de > _________________________________________________________________ > __________ >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Wed Apr 19 11:22:37 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0504E129BCD for ; Wed, 19 Apr 2017 11:22:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ojVXHzgTrLmA for ; Wed, 19 Apr 2017 11:22:33 -0700 (PDT) Received: from mail-io0-x232.google.com (mail-io0-x232.google.com [IPv6:2607:f8b0:4001:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25B95129B11 for ; Wed, 19 Apr 2017 11:22:33 -0700 (PDT) Received: by mail-io0-x232.google.com with SMTP id k87so31481441ioi.0 for ; Wed, 19 Apr 2017 11:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=yIX56KmGLzT3qH6wp1Okc/ZMllHvsNwHhvO5tB6X+7I=; b=BA3/8zOqgLxcKg+uUf+qfsWY3HmrKRyJuBK/4MKGmRAo3jnz/HzmVNWJScgqVuxMxB TeTkXNRorv9YpaDg5WKhrcP6a/oROVMRndhi7NeG+j505mUmseIUL4VSoWpx/7cTpQUa XVxwwKmgv1HBCXST8lFgw/Fb7jx3miHoge6IoZPqLlyxumSaOIBQBTJCijWz5rz7TjGV yTKcbMz/kB+byFHbSNfCAkwvIyxV+wPe2Z1Spkb7k+UiAZRHO7KLooFSHPqiLmitsJdK tW8No8je3OPzEIH34CIOiw19D+pRhlYSf8KwfNbL6JqTEX5JL2urnqgMs6reiXh9flpq 39kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=yIX56KmGLzT3qH6wp1Okc/ZMllHvsNwHhvO5tB6X+7I=; b=qgxQ2n+7wTgNb2l4X0j4uAMAZnS5z3WqwAuHaNdMU2tipjtp7oHAkFuIJsZ2B50utL 34Y/2lMK2dGQPF4bJ7fkrj8DQtdWjv69AmB89U6wGPERW4H6W5NspPqURZFSARWxFBAt 366IMmgpgYn1KagYHFgtpGC6/tb5pXlTzi/VOVvf68n7SC4ocJ8s76VoghGfEWsMzA3p k6MVvOvXEvI9f+uIxQITDr/wtfI3PvYvhvEk87E7uOxUjDZV7D+BVbVb1KqBlBLYAv2Q 57S20MExJHnqTMPubhELTc763TDNt14FNLDYyyRfAHxTVJLYHABzqBY27vKUQYEpVZsD 6bBQ== X-Gm-Message-State: AN3rC/6R0sLevfzskQIScbAnLLo2gS84UZDDSxOi4kRBVaB29IFJykW6 jaC1WOQAv6lEVdM7AGexkfQ9z+zS/A== X-Received: by 10.107.170.80 with SMTP id t77mr4894238ioe.113.1492626151857; Wed, 19 Apr 2017 11:22:31 -0700 (PDT) MIME-Version: 1.0 References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: From: Adam Montville Date: Wed, 19 Apr 2017 18:22:21 +0000 Message-ID: To: "Haynes, Dan" , Muhammad Nasir Mumtaz Bhutta , Henk Birkholz , "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a11415d589078fb054d891bd5 Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 18:22:36 -0000 --001a11415d589078fb054d891bd5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable +1, thanks Danny. On Wed, Apr 19, 2017 at 7:34 AM Haynes, Dan wrote: > Hi Muhammad, > > You will want to check out the Vulnerability Assessment Scenario first > which can be found here ( > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario)= . > You can also find additional information in this thread ( > https://www.ietf.org/mail-archive/web/sacm/current/msg04698.html). > > Hope this helps! > > Thanks, > > Danny > > > -----Original Message----- > > From: Muhammad Nasir Mumtaz Bhutta [mailto:mmbhutta@kfu.edu.sa] > > Sent: Wednesday, April 19, 2017 1:50 AM > > To: Haynes, Dan ; Henk Birkholz > > ; Adam Montville > > ; sacm@ietf.org > > Subject: RE: [sacm] Components for Vulnerability Assessment > > > > Hi every one, > > I have joined this group recently and want to know more about the > discussion > > topic. It looks like some architecture is being discussed in the thread= . > > > > From where should I get more information about this so that I can > participate > > and contribute my thoughts as well. > > > > Thanks. > > > > > > Regards, > > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > Muhammad Nasir Mumtaz Bhutta, PhD > > Assistant Professor, > > Information Systems Dept > > College of Computer Sciences and Information Technology King Faisal > University > > Saudi Arabia Alahssa 31982 P.O. Box 400 Tel + 966 (013) 589 9207 > <+966%2013%20589%209207> Fax + 966 > > (013) 589 9236 > > > > > > > > -----Original Message----- > > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan > > Sent: Tuesday, April 18, 2017 5:55 PM > > To: Henk Birkholz ; Adam Montville > > ; sacm@ietf.org > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > Hi Henk, > > > > The reasoning behind my comment was that in the IETF 98 notes > > (https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it > says: > > > > --- > > Per Slide 7: > > Q: (Adam Montville): Is the vulnerability assessor talk to the > repository or talking > > directly to the collector? > > A: (Jessica Fitzgerald-McKay): I could see an implementer combining the > > collector and end-point repository into one. If we're treating them as > functional > > components I'm not sure we need to be that specific. > > A: (Dave Waltermire): We want this architecture to be de-composable. I= f > we > > treat the end-point repository as a proxy, we might be making things to= o > > complicated. It might be simpler to treat the end-point repository as a > data > > store. > > A: (Adam Montville): Agreed. > > > > Q: (Dave Waltermire) Are there any concerns with separating the end-poi= nt > > repository and the collector being the component responsible for > collection? > > A: > > > > Comment: (Adam Montville): The "results repository" will now go into th= e > "end- > > point repository. > > --- > > > > Given that, I thought there was some consensus around making that chang= e. > > > > Thanks, > > > > Danny > > > > > -----Original Message----- > > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de] > > > Sent: Tuesday, April 18, 2017 10:49 AM > > > To: Haynes, Dan ; Adam Montville > > > ; sacm@ietf.org > > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > > > Hello Danny, > > > > > > the "Assessment Results Repository" and "Endpoint Repository" are two > > > different components with different functions. The "Endpoint > Repository" > > > of course is the provider for the consumer that is the "Assessment > > > Results Repository". > > > > > > Most certainly, both components can be running on the same endpoint o= r > > > be composed in a single service that merges both components. I suppos= e > > > that is what you meant? > > > > > > For the sake of show-casing how the architecture is working. I would > > > recommend to start with each SACM component instantiated as a separat= e > > > software component. Despite the fact that it looks simpler to just ad= d > > > the "Assessment Result" to the ""Endpoint Characterization Records" > > > retained in an "Endpoint Repository". > > > > > > Ultimately, people will want to use existing software and > > > Asset/Inventory Management Software is a big candidate to provide the > > > functions of an "Endpoint Repository". In consequence, I would keep > > > these components instantiated separately in the first iteration. > > > > > > What does the group think? > > > > > > Viele Gr=C3=BC=C3=9Fe, > > > > > > Henk > > > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > > Hi Adam, > > > > > > > > > > > > > > > > I think this is a good list for me, but, should the assessment > > > > results repository be merged into the endpoint repository? > > > > > > > > Thanks, > > > > > > > > Danny > > > > > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam > > > > Montville > > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > > *To:* sacm@ietf.org > > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > > > > > Hi All: > > > > > > > > > > > > > > > > We've got a list of components we think we care about for our > > > > vulnerability assessment scenario (focusing on the narrowest "ideal > > > > case" through the scenario for the time being. > > > > > > > > > > > > > > > > These are: > > > > > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > > > * Vulnerability Assessor > > > > > > > > * Endpoint Repository > > > > > > > > * Collector > > > > > > > > * Target Endpoint > > > > > > > > * Assessment Results Repository > > > > > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] > > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of > components? > > > > > > > > > > > > > > > > Please opine within the next few days (say by end of your day on > > > > Thursday, wherever you may be), so that we can generate some > > > > momentum on this effort. > > > > > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > > > > > Adam > > > > > > > > > > > > > > > > [1] > > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentSce= n > > > > ar > > > > io > > > > > > > > [2] > > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabi= l > > > > it > > > > y-scenario-discussion-00.pdf > > > > > > > > [3] > > > > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > sacm mailing list > > > > sacm@ietf.org > > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > --001a11415d589078fb054d891bd5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
+1, thanks Danny.

On Wed, Apr 19, 2017 at 7:34 AM Haynes, Dan <dhaynes@mitre.org> wrote:
Hi Muhammad,

You will want to check out the Vulnerability Assessment Scenario first whic= h can be found here (https:/= /trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario). You= can also find additional information in this thread (https://www.ietf.org/mail-archive/web/sacm/current/msg046= 98.html).

Hope this helps!

Thanks,

Danny

> -----Original Message-----
> From: Muhammad Nasir Mumtaz Bhutta [mailto:mmbhutta@kfu.edu.sa]
> Sent: Wednesday, April 19, 2017 1:50 AM
> To: Haynes, Dan <dhaynes@mitre.org>; Henk Birkholz
> <henk.birkholz@sit.fraunhofer.de>; Adam Montville
> <ad= am.w.montville@gmail.com>; sacm@ietf.org
> Subject: RE: [sacm] Components for Vulnerability Assessment
>
> Hi every one,
> I have joined this group recently and want to know more about the disc= ussion
> topic. It looks like some architecture is being discussed in the threa= d.
>
> From where should I get more information about this so that I can part= icipate
> and contribute my thoughts as well.
>
> Thanks.
>
>
> Regards,
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Muhammad Nasir Mumtaz Bhutta, PhD
> Assistant Professor,
> Information Systems Dept
> College of Computer Sciences and Information Technology King Faisal Un= iversity
> Saudi Arabia Alahssa 31982 P.O. Box 400 Tel=C2=A0 + 966 (013) 58= 9 9207 Fax + 966
> (013) 589 9236
>
>
>
> -----Original Message-----
> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
> Sent: Tuesday, April 18, 2017 5:55 PM
> To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; Adam Montvill= e
> <ad= am.w.montville@gmail.com>; sacm@ietf.org
> Subject: Re: [sacm] Components for Vulnerability Assessment
>
> Hi Henk,
>
> The reasoning behind my comment was that in the IETF 98 notes
> (https://www.ietf.org/proceedings= /98/minutes/minutes-98-sacm-00) it says:
>
> ---
> Per Slide 7:
> Q: (Adam Montville): Is the vulnerability assessor talk to the reposit= ory or talking
> directly to the collector?
> A: (Jessica Fitzgerald-McKay): I could see an implementer combining th= e
> collector and end-point repository into one.=C2=A0 If we're treati= ng them as functional
> components I'm not sure we need to be that specific.
> A: (Dave Waltermire): We want this architecture to be de-composable.= =C2=A0 If we
> treat the end-point repository as a proxy, we might be making things t= oo
> complicated. It might be simpler to treat the end-point repository as = a data
> store.
> A: (Adam Montville): Agreed.
>
> Q: (Dave Waltermire) Are there any concerns with separating the end-po= int
> repository and the collector being the component responsible for colle= ction?
> A: <no response>
>
> Comment: (Adam Montville): The "results repository" will now= go into the "end-
> point repository.
> ---
>
> Given that, I thought there was some consensus around making that chan= ge.
>
> Thanks,
>
> Danny
>
> > -----Original Message-----
> > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de]
> > Sent: Tuesday, April 18, 2017 10:49 AM
> > To: Haynes, Dan <dhaynes@mitre.org>; Adam Montville
> > <adam.w.montville@gmail.com>; sacm@ietf.org
> > Subject: Re: [sacm] Components for Vulnerability Assessment
> >
> > Hello Danny,
> >
> > the "Assessment Results Repository" and "Endpoint = Repository" are two
> > different components with different functions. The "Endpoint= Repository"
> > of course is the provider for the consumer that is the "Asse= ssment
> > Results Repository".
> >
> > Most certainly, both components can be running on the same endpoi= nt or
> > be composed in a single service that merges both components. I su= ppose
> > that is what you meant?
> >
> > For the sake of show-casing how the architecture is working. I wo= uld
> > recommend to start with each SACM component instantiated as a sep= arate
> > software component. Despite the fact that it looks simpler to jus= t add
> > the "Assessment Result" to the ""Endpoint Cha= racterization Records"
> > retained in an "Endpoint Repository".
> >
> > Ultimately, people will want to use existing software and
> > Asset/Inventory Management Software is a big candidate to provide= the
> > functions of an "Endpoint Repository". In consequence, = I would keep
> > these components instantiated separately in the first iteration.<= br> > >
> > What does the group think?
> >
> > Viele Gr=C3=BC=C3=9Fe,
> >
> > Henk
> >
> > On 04/18/2017 04:21 PM, Haynes, Dan wrote:
> > > Hi Adam,
> > >
> > >
> > >
> > > I think this is a good list for me, but, should the assessme= nt
> > > results repository be merged into the endpoint repository? > > >
> > > Thanks,
> > >
> > > Danny
> > >
> > >
> > >
> > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam
> > > Montville
> > > *Sent:* Tuesday, April 18, 2017 9:04 AM
> > > *To:* sac= m@ietf.org
> > > *Subject:* [sacm] Components for Vulnerability Assessment > > >
> > >
> > >
> > > Hi All:
> > >
> > >
> > >
> > > We've got a list of components we think we care about fo= r our
> > > vulnerability assessment scenario (focusing on the narrowest= "ideal
> > > case" through the scenario for the time being.
> > >
> > >
> > >
> > > These are:
> > >
> > >
> > >
> > > * Vulnerability Detection Data Repository
> > >
> > > * Vulnerability Assessor
> > >
> > > * Endpoint Repository
> > >
> > > * Collector
> > >
> > > * Target Endpoint
> > >
> > > * Assessment Results Repository
> > >
> > >
> > >
> > > For reference, see our wiki [1] and/or the slides from IETF = 98 [2]
> > > and/or the minutes from IETF 98 [3]
> > >
> > >
> > >
> > > Question to the WG: Is this an appropriate initial list of c= omponents?
> > >
> > >
> > >
> > > Please opine within the next few days (say by end of your da= y on
> > > Thursday, wherever you may be), so that we can generate some=
> > > momentum on this effort.
> > >
> > >
> > >
> > > Kind regards,
> > >
> > >
> > >
> > > Adam
> > >
> > >
> > >
> > > [1]
> > > https://trac.ietf= .org/trac/sacm/wiki/SacmVulnerabilityAssessmentScen
> > > ar
> > > io
> > >
> > > [2]
> > > https://www.ietf.= org/proceedings/98/slides/slides-98-sacm-vulnerabil
> > > it
> > > y-scenario-discussion-00.pdf
> > >
> > > [3]
> > > https://www.ietf.or= g/proceedings/98/minutes/minutes-98-sacm-00.txt
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > sacm mailing list
> > > sacm@ietf= .org
> > > https://www.ietf.org/mailman/listinfo/sac= m
> > >
>
> _______________________________________________
> sacm mailing list
> sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm
--001a11415d589078fb054d891bd5-- From nobody Wed Apr 19 11:26:02 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E834129BD8 for ; Wed, 19 Apr 2017 11:25:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id palR_RxtgGr0 for ; Wed, 19 Apr 2017 11:25:55 -0700 (PDT) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CF99129BC7 for ; Wed, 19 Apr 2017 11:25:55 -0700 (PDT) Received: by mail-io0-x22a.google.com with SMTP id o22so33258959iod.3 for ; Wed, 19 Apr 2017 11:25:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=Ot7QSg/tUhkYPZWBzZL11B+svxKO1xX4xJAacEJ15Sg=; b=trlA+ZQj6GklIGAiOqJf2ZGxDUl87IXd53KyiU/uj4wEDnrzh3bKIkLcMvG047ivI4 +J650ql/xBaHnpCtiXNDMTrdL2dS20ItXVeDpsv2p5rAiF7m4IQ4NQTg5funAa2Lp4Ho FoBSdN7xaidNQwZL64A4j/q1MWt7/ZZ2zhR52zGJRGP8uIZbER3XWRVgwUeSoOlWrHDP NiH3W6iv26/nsrposwCg+LPkFlAgMegGkcS84XR4DV8DV3VjEYZjxoI9Xr3VnYIa803t Qivl3IsA8QBtSzV6iVOsUqcTahVMRt/5+Abn0N7dyuYnqenmFTy04aaC5tzfVwO4tTEl DVkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=Ot7QSg/tUhkYPZWBzZL11B+svxKO1xX4xJAacEJ15Sg=; b=tMN+CZCtHk5m+Jixicd4YHXYu0i+E8wN2A9TJ/1Ce4+G/fn7OnIT1pER/wPZvj+P9S PGqZjkA7TdLOgyA++sy1Tbc3Sgp8OPDBOhK88YMgcjh4umHLo5foHuKNBZFNRqg/Nxss 87D98aJCrbaDW7q4o0fEAa9XsgrfC0qU8y0kD0qFnoRi/tuN4C+nQ1Jv+z/FTNMWhMCo x8wU7BvldgcvwI1ZCCUVod9IyMmJSOIUjO9hmnmAGiFxIE0YCCVVcq2aVcvZRro5yhcZ cY05q8Nj5z49s/QYCKrm0a2ujRc1LA+da0tDB5viPd+WAyYVV5x3q3H22gSENmC2aHgs Wf0A== X-Gm-Message-State: AN3rC/62SK1ENBmWr/S22QJl/6gErSnOYgiVYUJ0TrC2Q1AMld9PVnkM eCHnPfYRgpvIqfunPrbOxe8w7byNTg== X-Received: by 10.36.37.147 with SMTP id g141mr22126767itg.69.1492626354565; Wed, 19 Apr 2017 11:25:54 -0700 (PDT) MIME-Version: 1.0 References: <10eb6709-c198-5fdc-1306-cb19c2f6da89@sit.fraunhofer.de> In-Reply-To: From: Adam Montville Date: Wed, 19 Apr 2017 18:25:44 +0000 Message-ID: To: "Haynes, Dan" , Carl-Heinz Genzel , "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a11453512a590c2054d8927a3 Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 18:25:58 -0000 --001a11453512a590c2054d8927a3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thanks for pointing that out. Yeah, IIRC, we were talking about the differences between the two sequence diagrams, so it might well be the case that the "affirmation" was about the diagram and not about any consensus in the room. Adam On Wed, Apr 19, 2017 at 7:36 AM Haynes, Dan wrote: > Thanks Carl-Heinz, it looks like I missed that. With that said, I will > keep quiet and let someone who was there clarify :). > > Thanks, > > Danny > > > -----Original Message----- > > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Carl-Heinz Genze= l > > Sent: Wednesday, April 19, 2017 1:48 AM > > To: sacm@ietf.org > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > Hello All, > > > > The comment mentioned by Danny becomes obsolete in the next section "Pe= r > > slide 8", where it seems to me that it is agreed upon to not combine th= e > > repositories. However, I wasn't there. > > > > Best Regards, > > Carl-Heinz Genzel > > > > Am 18.04.2017 um 17:27 schrieb Adam Montville: > > > > > > > > > On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan > > > wrote: > > > > > > Hi Henk, > > > > > > The reasoning behind my comment was that in the IETF 98 notes > > > (https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) > it > > > says: > > > > > > --- > > > Per Slide 7: > > > Q: (Adam Montville): Is the vulnerability assessor talk to the > > > repository or talking directly to the collector? > > > A: (Jessica Fitzgerald-McKay): I could see an implementer combini= ng > > > the collector and end-point repository into one. If we're treati= ng > > > them as functional components I'm not sure we need to be that > specific. > > > A: (Dave Waltermire): We want this architecture to be > > > de-composable. If we treat the end-point repository as a proxy, = we > > > might be making things too complicated. It might be simpler to > treat > > > the end-point repository as a data store. > > > A: (Adam Montville): Agreed. > > > > > > Q: (Dave Waltermire) Are there any concerns with separating the > > > end-point repository and the collector being the component > > > responsible for collection? > > > A: > > > > > > Comment: (Adam Montville): The "results repository" will now go > into > > > the "end-point repository. > > > --- > > > > > > Given that, I thought there was some consensus around making that > > > change. > > > > > > > > > Hm... FWIW, I don't feel I would have said that as a personal > > > opinion, but maybe that there was some agreement in the room. Of > > > course, the list is what counts. > > > > > > Without a chair hat on, I happen to agree with Henk. What we are > > > calling components are "compose-able function groups" in some sense, > > > and that they should be treated separately, but are likely to be > > > implemented in some composed manner. > > > > > > > > > > > > > > > Thanks, > > > > > > Danny > > > > > > > -----Original Message----- > > > > From: Henk Birkholz [mailto:henk.birkholz@sit.fraunhofer.de > > > ] > > > > Sent: Tuesday, April 18, 2017 10:49 AM > > > > To: Haynes, Dan >; > > > Adam Montville > > > > > >; > > > sacm@ietf.org > > > > Subject: Re: [sacm] Components for Vulnerability Assessment > > > > > > > > Hello Danny, > > > > > > > > the "Assessment Results Repository" and "Endpoint Repository" > are two > > > > different components with different functions. The "Endpoint > > > Repository" > > > > of course is the provider for the consumer that is the > "Assessment > > > Results > > > > Repository". > > > > > > > > Most certainly, both components can be running on the same > > > endpoint or be > > > > composed in a single service that merges both components. I > > > suppose that is > > > > what you meant? > > > > > > > > For the sake of show-casing how the architecture is working. I > would > > > > recommend to start with each SACM component instantiated as a > > separate > > > > software component. Despite the fact that it looks simpler to > just > > > add the > > > > "Assessment Result" to the ""Endpoint Characterization Records" > > > > retained in an "Endpoint Repository". > > > > > > > > Ultimately, people will want to use existing software and > > > Asset/Inventory > > > > Management Software is a big candidate to provide the functions > of an > > > > "Endpoint Repository". In consequence, I would keep these > components > > > > instantiated separately in the first iteration. > > > > > > > > What does the group think? > > > > > > > > Viele Gr=C3=BC=C3=9Fe, > > > > > > > > Henk > > > > > > > > On 04/18/2017 04:21 PM, Haynes, Dan wrote: > > > > > Hi Adam, > > > > > > > > > > > > > > > > > > > > I think this is a good list for me, but, should the assessmen= t > > > results > > > > > repository be merged into the endpoint repository? > > > > > > > > > > Thanks, > > > > > > > > > > Danny > > > > > > > > > > > > > > > > > > > > *From:*sacm [mailto:sacm-bounces@ietf.org > > > ] *On Behalf Of *Adam > > > > > Montville > > > > > *Sent:* Tuesday, April 18, 2017 9:04 AM > > > > > *To:* sacm@ietf.org > > > > > *Subject:* [sacm] Components for Vulnerability Assessment > > > > > > > > > > > > > > > > > > > > Hi All: > > > > > > > > > > > > > > > > > > > > We've got a list of components we think we care about for our > > > > > vulnerability assessment scenario (focusing on the narrowest > "ideal > > > > > case" through the scenario for the time being. > > > > > > > > > > > > > > > > > > > > These are: > > > > > > > > > > > > > > > > > > > > * Vulnerability Detection Data Repository > > > > > > > > > > * Vulnerability Assessor > > > > > > > > > > * Endpoint Repository > > > > > > > > > > * Collector > > > > > > > > > > * Target Endpoint > > > > > > > > > > * Assessment Results Repository > > > > > > > > > > > > > > > > > > > > For reference, see our wiki [1] and/or the slides from IETF 9= 8 > [2] > > > > > and/or the minutes from IETF 98 [3] > > > > > > > > > > > > > > > > > > > > Question to the WG: Is this an appropriate initial list of > > > components? > > > > > > > > > > > > > > > > > > > > Please opine within the next few days (say by end of your day > on > > > > > Thursday, wherever you may be), so that we can generate some > > > momentum > > > > > on this effort. > > > > > > > > > > > > > > > > > > > > Kind regards, > > > > > > > > > > > > > > > > > > > > Adam > > > > > > > > > > > > > > > > > > > > [1] > > > > > > > > > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenar > > > > > io > > > > > > > > > > [2] > > > > > > > > > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabilit > > > > > y-scenario-discussion-00.pdf > > > > > > > > > > [3] > > > https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.tx= t > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > sacm mailing list > > > > > sacm@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > -- > > _________________________________________________________________ > > _____________________ > > > > Carl-Heinz Genzel > > Wissenschaftlicher Mitarbeiter > > Rechnernetze / Informationssicherheit > > Institut f=C3=BCr Informatik und Automation > > Hochschule Bremen / University of Applied Sciences Flughafenallee 10, > 28199 > > Bremen, Germany > > tel.: +49 421 5905 5442 <+49%20421%2059055442> > > mobil: +49 179 1636844 <+49%20179%201636844> > > email: carl-heinz.genzel@hs-bremen.de > > _________________________________________________________________ > > __________ > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > --001a11453512a590c2054d8927a3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thanks for pointing that out. Yeah, IIRC, we were talking = about the differences between the two sequence diagrams, so it might well b= e the case that the "affirmation" was about the diagram and not a= bout any consensus in the room.

Adam

On Wed, Apr 19, 2017 at 7:36 AM Hayn= es, Dan <dhaynes@mitre.org> = wrote:
Thanks Carl-Heinz, it looks = like I missed that.=C2=A0 With that said, I will keep quiet and let someone= who was there clarify :).

Thanks,

Danny

> -----Original Message-----
> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Carl-Heinz Genzel
> Sent: Wednesday, April 19, 2017 1:48 AM
> To: sacm@ietf.org
> Subject: Re: [sacm] Components for Vulnerability Assessment
>
> Hello All,
>
> The comment mentioned by Danny becomes obsolete in the next section &q= uot;Per
> slide 8", where it seems to me that it is agreed upon to not comb= ine the
> repositories. However, I wasn't there.
>
> Best Regards,
> Carl-Heinz Genzel
>
> Am 18.04.2017 um 17:27 schrieb Adam Montville:
> >
> >
> > On Tue, Apr 18, 2017 at 9:55 AM Haynes, Dan <dhaynes@mitre.org
> > <mailto:dhaynes@mitre.org>> wrote:
> >
> >=C2=A0 =C2=A0 =C2=A0Hi Henk,
> >
> >=C2=A0 =C2=A0 =C2=A0The reasoning behind my comment was that in th= e IETF 98 notes
> >=C2=A0 =C2=A0 =C2=A0(https://= www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00) it
> >=C2=A0 =C2=A0 =C2=A0says:
> >
> >=C2=A0 =C2=A0 =C2=A0---
> >=C2=A0 =C2=A0 =C2=A0Per Slide 7:
> >=C2=A0 =C2=A0 =C2=A0Q: (Adam Montville): Is the vulnerability asse= ssor talk to the
> >=C2=A0 =C2=A0 =C2=A0repository or talking directly to the collecto= r?
> >=C2=A0 =C2=A0 =C2=A0A: (Jessica Fitzgerald-McKay): I could see an = implementer combining
> >=C2=A0 =C2=A0 =C2=A0the collector and end-point repository into on= e.=C2=A0 If we're treating
> >=C2=A0 =C2=A0 =C2=A0them as functional components I'm not sure= we need to be that specific.
> >=C2=A0 =C2=A0 =C2=A0A: (Dave Waltermire): We want this architectur= e to be
> >=C2=A0 =C2=A0 =C2=A0de-composable.=C2=A0 If we treat the end-point= repository as a proxy, we
> >=C2=A0 =C2=A0 =C2=A0might be making things too complicated. It mig= ht be simpler to treat
> >=C2=A0 =C2=A0 =C2=A0the end-point repository as a data store.
> >=C2=A0 =C2=A0 =C2=A0A: (Adam Montville): Agreed.
> >
> >=C2=A0 =C2=A0 =C2=A0Q: (Dave Waltermire) Are there any concerns wi= th separating the
> >=C2=A0 =C2=A0 =C2=A0end-point repository and the collector being t= he component
> >=C2=A0 =C2=A0 =C2=A0responsible for collection?
> >=C2=A0 =C2=A0 =C2=A0A: <no response>
> >
> >=C2=A0 =C2=A0 =C2=A0Comment: (Adam Montville): The "results r= epository" will now go into
> >=C2=A0 =C2=A0 =C2=A0the "end-point repository.
> >=C2=A0 =C2=A0 =C2=A0---
> >
> >=C2=A0 =C2=A0 =C2=A0Given that, I thought there was some consensus= around making that
> >=C2=A0 =C2=A0 =C2=A0change.
> >
> >
> > Hm...=C2=A0 FWIW, I don't feel I would have said that as a pe= rsonal
> > opinion, but maybe that there was some agreement in the room.=C2= =A0 Of
> > course, the list is what counts.
> >
> > Without a chair hat on, I happen to agree with Henk. What we are<= br> > > calling components are "compose-able function groups" i= n some sense,
> > and that they should be treated separately, but are likely to be<= br> > > implemented in some composed manner.
> >
> >
> >
> >
> >=C2=A0 =C2=A0 =C2=A0Thanks,
> >
> >=C2=A0 =C2=A0 =C2=A0Danny
> >
> >=C2=A0 =C2=A0 =C2=A0> -----Original Message-----
> >=C2=A0 =C2=A0 =C2=A0> From: Henk Birkholz [mailto:henk.birkholz@sit.f= raunhofer.de
> >=C2=A0 =C2=A0 =C2=A0<mailto:henk.birkholz@sit.fraunhofer.de>]<= br> > >=C2=A0 =C2=A0 =C2=A0> Sent: Tuesday, April 18, 2017 10:49 AM > >=C2=A0 =C2=A0 =C2=A0> To: Haynes, Dan <dhaynes@mitre.org <mailto:dhaynes@mitre.org>&g= t;;
> >=C2=A0 =C2=A0 =C2=A0Adam Montville
> >=C2=A0 =C2=A0 =C2=A0> <adam.w.montville@gmail.com
> <mailto:adam.w.montville@gmail.com>>;
> >=C2=A0 =C2=A0 =C2=A0sacm@ietf.org <mailto:sacm@ietf.org>
> >=C2=A0 =C2=A0 =C2=A0> Subject: Re: [sacm] Components for Vulner= ability Assessment
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> Hello Danny,
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> the "Assessment Results Repository&q= uot; and "Endpoint Repository" are two
> >=C2=A0 =C2=A0 =C2=A0> different components with different funct= ions. The "Endpoint
> >=C2=A0 =C2=A0 =C2=A0Repository"
> >=C2=A0 =C2=A0 =C2=A0> of course is the provider for the consume= r that is the "Assessment
> >=C2=A0 =C2=A0 =C2=A0Results
> >=C2=A0 =C2=A0 =C2=A0> Repository".
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> Most certainly, both components can be ru= nning on the same
> >=C2=A0 =C2=A0 =C2=A0endpoint or be
> >=C2=A0 =C2=A0 =C2=A0> composed in a single service that merges = both components. I
> >=C2=A0 =C2=A0 =C2=A0suppose that is
> >=C2=A0 =C2=A0 =C2=A0> what you meant?
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> For the sake of show-casing how the archi= tecture is working. I would
> >=C2=A0 =C2=A0 =C2=A0> recommend to start with each SACM compone= nt instantiated as a
> separate
> >=C2=A0 =C2=A0 =C2=A0> software component. Despite the fact that= it looks simpler to just
> >=C2=A0 =C2=A0 =C2=A0add the
> >=C2=A0 =C2=A0 =C2=A0> "Assessment Result" to the &quo= t;"Endpoint Characterization Records"
> >=C2=A0 =C2=A0 =C2=A0> retained in an "Endpoint Repository&= quot;.
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> Ultimately, people will want to use exist= ing software and
> >=C2=A0 =C2=A0 =C2=A0Asset/Inventory
> >=C2=A0 =C2=A0 =C2=A0> Management Software is a big candidate to= provide the functions of an
> >=C2=A0 =C2=A0 =C2=A0> "Endpoint Repository". In conse= quence, I would keep these components
> >=C2=A0 =C2=A0 =C2=A0> instantiated separately in the first iter= ation.
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> What does the group think?
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> Viele Gr=C3=BC=C3=9Fe,
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> Henk
> >=C2=A0 =C2=A0 =C2=A0>
> >=C2=A0 =C2=A0 =C2=A0> On 04/18/2017 04:21 PM, Haynes, Dan wrote= :
> >=C2=A0 =C2=A0 =C2=A0> > Hi Adam,
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > I think this is a good list for me, = but, should the assessment
> >=C2=A0 =C2=A0 =C2=A0results
> >=C2=A0 =C2=A0 =C2=A0> > repository be merged into the endpoi= nt repository?
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Thanks,
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Danny
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > *From:*sacm [mailto:sacm-bounces@ietf.org
> >=C2=A0 =C2=A0 =C2=A0<mailto:sacm-bounces@ietf.org>] *On Behalf Of *Adam<= br> > >=C2=A0 =C2=A0 =C2=A0> > Montville
> >=C2=A0 =C2=A0 =C2=A0> > *Sent:* Tuesday, April 18, 2017 9:04= AM
> >=C2=A0 =C2=A0 =C2=A0> > *To:* sacm@ietf.org <mailto:sacm@ietf.org>
> >=C2=A0 =C2=A0 =C2=A0> > *Subject:* [sacm] Components for Vul= nerability Assessment
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Hi All:
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > We've got a list of components w= e think we care about for our
> >=C2=A0 =C2=A0 =C2=A0> > vulnerability assessment scenario (f= ocusing on the narrowest "ideal
> >=C2=A0 =C2=A0 =C2=A0> > case" through the scenario for = the time being.
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > These are:
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Vulnerability Detection Data Repos= itory
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Vulnerability Assessor
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Endpoint Repository
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Collector
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Target Endpoint
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > * Assessment Results Repository
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > For reference, see our wiki [1] and/= or the slides from IETF 98 [2]
> >=C2=A0 =C2=A0 =C2=A0> > and/or the minutes from IETF 98 [3]<= br> > >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Question to the WG: Is this an appro= priate initial list of
> >=C2=A0 =C2=A0 =C2=A0components?
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Please opine within the next few day= s (say by end of your day on
> >=C2=A0 =C2=A0 =C2=A0> > Thursday, wherever you may be), so t= hat we can generate some
> >=C2=A0 =C2=A0 =C2=A0momentum
> >=C2=A0 =C2=A0 =C2=A0> > on this effort.
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Kind regards,
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > Adam
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > [1]
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0h= ttps://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenar > >=C2=A0 =C2=A0 =C2=A0> > io
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > [2]
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0h= ttps://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerabilit > >=C2=A0 =C2=A0 =C2=A0> > y-scenario-discussion-00.pdf
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > [3]
> >=C2=A0 =C2=A0 =C2=A0https= ://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> >
> >=C2=A0 =C2=A0 =C2=A0> > ____________________________________= ___________
> >=C2=A0 =C2=A0 =C2=A0> > sacm mailing list
> >=C2=A0 =C2=A0 =C2=A0> > sacm@ietf.org <mailto:sacm@ietf.org>
> >=C2=A0 =C2=A0 =C2=A0> > https://www.ietf.or= g/mailman/listinfo/sacm
> >=C2=A0 =C2=A0 =C2=A0> >
> >
> >
> >
> > _______________________________________________
> > sacm mailing list
> > sacm@ietf.org<= /a>
> > https://www.ietf.org/mailman/listinfo/sacm > >
>
> --
> _________________________________________________________________
> _____________________
>
> Carl-Heinz Genzel
> Wissenschaftlicher Mitarbeiter
> Rechnernetze / Informationssicherheit
> Institut f=C3=BCr Informatik und Automation
> Hochschule Bremen / University of Applied Sciences Flughafenallee 10, = 28199
> Bremen, Germany
> tel.:=C2=A0 +49 421 5905 5442
> mobil: +49 179 1636844
> email: carl-heinz.genzel@hs-bremen.de
> _________________________________________________________________
> __________
>
> _______________________________________________
> sacm mailing list
> sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm
--001a11453512a590c2054d8927a3-- From nobody Wed Apr 19 12:32:07 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B10B31243F3 for ; Wed, 19 Apr 2017 12:32:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2V9BbjE1dQpF for ; Wed, 19 Apr 2017 12:32:04 -0700 (PDT) Received: from mail-yb0-x235.google.com (mail-yb0-x235.google.com [IPv6:2607:f8b0:4002:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1188A126C22 for ; Wed, 19 Apr 2017 12:32:04 -0700 (PDT) Received: by mail-yb0-x235.google.com with SMTP id s22so14229186ybe.3 for ; Wed, 19 Apr 2017 12:32:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=Lw3R2KIlCi9OoLAdp7upca2CcnEWDHRudrdWXHiFooY=; b=mlwLaMKHz3HNcmeLSN0lSgbnlBILX7++iJonwyS84a4PikPcKbvgO+5kbUxXL23H5J 2vwj4DJTyHeF/VKoxxBykCVQ9VrjcLXVP4iWuXTjEeNIuffaJRRXsolIckscIsccKMZe 6mW8KJlEgvSgxpenj7jeSnyDLmr67WD2riHtL5h8sVJyin7oo1AqUDUr52JZ9WZTwGTb kacark05cTTrZWuiRwgCx2gJx5YRe2/846JOo5f8tSoUrvoFyVEnCM5VIvBZS4nlpSot ItAkCsoAoeLOFHlT2wZoW4ctWqokD/GZhqR9ah6JqRJ9sPCA5yxvwSazd1uTPN43N0ao oMrA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=Lw3R2KIlCi9OoLAdp7upca2CcnEWDHRudrdWXHiFooY=; b=HXS82rz35w0kiRaD9ZJEzA67rs++brFei2kIke0io4L4Fo0jTUsRTTi7RfNyJxlPyj MNQmtACLCiuLDWz/bl/JOyeWL16VKWZOrWjR089SsIBzHYqkBvtJSvDet/yQsYD9MKZE MTwxJZ+vZIi7emoieOCF94j8VuoJSYm1Cz4cvXlGoWD5/r+ZYb53i9S899UF9SWTruoj g6ViHWXNMck7M22fn4exQHaXygiQvHqTp9kWaaNhNGwaDAtc/vTuBwWyfZtgrE1pfVNL wyrWXUnffHY4MZo4hFs7NFvZs11gqZycPmB10MjBrbZoJPt7xUnbBSdEmGKEhKFSVcsQ gJig== X-Gm-Message-State: AN3rC/4+sRxY2D7ndsKkQRww0j8c7ae1dQrytTj1DjUZfggjD+kFTJkW Y+xjOl1A9fpTJugYifsOXuQE1uU9Xg== X-Received: by 10.98.29.86 with SMTP id d83mr4638056pfd.68.1492630323118; Wed, 19 Apr 2017 12:32:03 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.162.41 with HTTP; Wed, 19 Apr 2017 12:31:22 -0700 (PDT) In-Reply-To: References: From: Kathleen Moriarty Date: Wed, 19 Apr 2017 15:31:22 -0400 Message-ID: To: "sacm@ietf.org" Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [sacm] Fwd: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Apr 2017 19:32:06 -0000 For those interested, Benoit has offered to provide an overview of the YANG catalog on a call, perhaps as part of an interim if we would like to make sure there is ample notice and agreement on times for this overview. Please let me know if the WG is interested and I'd be happy to help arrange it. Se the referenced blog for more information. Kathleen ---------- Forwarded message ---------- From: Benoit Claise Date: Wed, Apr 19, 2017 at 2:35 PM Subject: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) To: IETF-Discussion list Dear all, https://www.ietf.org/blog/2017/04/yang-catalog-latest-development-ietf-98-hackathon/ Enjoy. Regards, Benoit -- Best regards, Kathleen From nobody Fri Apr 21 06:01:55 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C31C6129478 for ; Fri, 21 Apr 2017 06:01:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.688 X-Spam-Level: X-Spam-Status: No, score=-2.688 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h_bljS2yugWH for ; Fri, 21 Apr 2017 06:01:48 -0700 (PDT) Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87809124234 for ; Fri, 21 Apr 2017 06:01:48 -0700 (PDT) Received: by mail-io0-x231.google.com with SMTP id o22so130583397iod.3 for ; Fri, 21 Apr 2017 06:01:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=NxIHYAYMS+gGSOurZM580XBfX8Ij96mE/HFb88U7JX8=; b=IaUeab9K49gUNLBTOfU5t2FPpbajM5uhlftiNdZuxLwAzgCFdWuJKcWmI1giNnz70O c66U87/cJ967FgYhJCWCcsxy0i88JbjDAcwanftaTp4fTMmY7kZk0T62oxo9losr4/hV TVa6ty9nczrhV92+ryf0pKku1eTjvcKQPZ6xUR8r8VzYDIZrW1RljPE1p2XaSC9CDFPS iKfYP2gdVVhFwGsCzonbg/ktyTpMsEWpUGcNIp51RcJSFEYd3+mIKxLO0vuHR9bd7HRY o9eXVLTysq1reP0VyJiS+opl7JvQna0QI3ZKKvOlKSmrEP6KWbBlDzJS5HUwEz7B3qOb z3wA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=NxIHYAYMS+gGSOurZM580XBfX8Ij96mE/HFb88U7JX8=; b=b4YsXUC5yL1/XU+EUDN30CmNDzLAAzWgn4NYbLSf/ZA0NNPq42ESfI25uJMNzT73JA 7lQZ1hCyrlnNWq7yZd3zUnwo5Hh9MQzdQQ+zMX35prJnhJW/gbEDS8RgLxLVnhvw9yie TKZSctOhQIIIU06h51GwrHtalsU27H0bSntQrJFEWuLPQJhOWDc0G9x9kBUwpHLUKo/u al6IeH5ujwmLIGyyIFo5FJND4GdJvAXipBrYFfHHWAjhuarSlBttNXJBB3mzHgRmbNWp YefownUMeqVzfLxGpxVP/dAfQF5iEiK2opYn++oiY6AuFl6XG9H5UHxGryPhvfR33rz1 K0Ow== X-Gm-Message-State: AN3rC/4roqsfGMjS9hwFzLJe5ZQdwl1Wb+0xOCm7Rm8UfcIjHyZ/hp1+ M5UAYQ9I+2imfaIq+FdIJMMXunybERRl X-Received: by 10.107.169.199 with SMTP id f68mr15598371ioj.199.1492779660367; Fri, 21 Apr 2017 06:01:00 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Adam Montville Date: Fri, 21 Apr 2017 13:00:49 +0000 Message-ID: To: "sacm@ietf.org" Content-Type: multipart/mixed; boundary=001a11426aa662a2e8054dacd997 Archived-At: Subject: Re: [sacm] Components for Vulnerability Assessment X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Apr 2017 13:01:51 -0000 --001a11426aa662a2e8054dacd997 Content-Type: multipart/alternative; boundary=001a11426aa662a2e5054dacd995 --001a11426aa662a2e5054dacd995 Content-Type: text/plain; charset=UTF-8 Hello Everyone, After some discussion on this topic, I feel like we've got no real objection to this proposed list of components. As such, this brings us back to the second version of the sequence diagram that some of us were working with not too long ago (see attached PDF vector diagram). Given that set of components, we can now start talking about the expected communications between them in an ideal case through the system. Remember that the VDI (vulnerability information) is assumed to have been transformed and placed into the VDD (vulnerability detection) Repository. I've numbered the flows in the attached sequence diagram to show the proposed order and so that we can talk about each flow by that number. Does this flow feel right to everyone on the list? What needs to be different? What alternate flows may exist for the basic case of checking inventory against a new vulnerability? Let's carry this discussion on for a week or so. (Do we need longer?) Kind regards, Adam On Tue, Apr 18, 2017 at 8:03 AM Adam Montville wrote: > Hi All: > > We've got a list of components we think we care about for our > vulnerability assessment scenario (focusing on the narrowest "ideal case" > through the scenario for the time being. > > These are: > > * Vulnerability Detection Data Repository > * Vulnerability Assessor > * Endpoint Repository > * Collector > * Target Endpoint > * Assessment Results Repository > > For reference, see our wiki [1] and/or the slides from IETF 98 [2] and/or > the minutes from IETF 98 [3] > > Question to the WG: Is this an appropriate initial list of components? > > Please opine within the next few days (say by end of your day on Thursday, > wherever you may be), so that we can generate some momentum on this effort. > > Kind regards, > > Adam > > [1] > https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenario > [2] > https://www.ietf.org/proceedings/98/slides/slides-98-sacm-vulnerability-scenario-discussion-00.pdf > > [3] https://www.ietf.org/proceedings/98/minutes/minutes-98-sacm-00.txt > > > --001a11426aa662a2e5054dacd995 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello Everyone,

After some discussion o= n this topic, I feel like we've got no real objection to this proposed = list of components. As such, this brings us back to the second version of t= he sequence diagram that some of us were working with not too long ago (see= attached PDF vector diagram).=C2=A0

Given that se= t of components, we can now start talking about the expected communications= between them in an ideal case through the system. Remember that the VDI (v= ulnerability information) is assumed to have been transformed and placed in= to the VDD (vulnerability detection) Repository. I've numbered the flow= s in the attached sequence diagram to show the proposed order and so that w= e can talk about each flow by that number.

Does th= is flow feel right to everyone on the list? What needs to be different? Wha= t alternate flows may exist for the basic case of checking inventory agains= t a new vulnerability?

Let's carry this discus= sion on for a week or so. (Do we need longer?)

Kin= d regards,

Adam

On Tue, Apr 18, 2017 at 8:03 AM Adam Montville <= adam.w.montville@gmail.com> wrote:
Hi Al= l:

We've got a list of components we think we care a= bout for our vulnerability assessment scenario (focusing on the narrowest &= quot;ideal case" through the scenario for the time being.
These are:

* Vulnerability Detection = Data Repository
* Vulnerability Assessor
* Endpoint Rep= ository
* Collector
* Target Endpoint
* Asses= sment Results Repository

For reference, see our wi= ki [1] and/or the slides from IETF 98 [2] and/or the minutes from IETF 98 [= 3]

Question to the WG: Is this an appropriate init= ial list of components?

Please opine within the ne= xt few days (say by end of your day on Thursday, wherever you may be), so t= hat we can generate some momentum on this effort.

= Kind regards,

Adam

--001a11426aa662a2e5054dacd995-- --001a11426aa662a2e8054dacd997 Content-Type: application/pdf; name="vulnerability_scenario_sequence_diagram_v2.pdf" Content-Disposition: attachment; filename="vulnerability_scenario_sequence_diagram_v2.pdf" Content-Transfer-Encoding: base64 Content-ID: <15b9096fa6e9659e75e2> X-Attachment-Id: 15b9096fa6e9659e75e2 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAG9WktzHLcRvuNX4Lg87GjwGMzM0ZF8kKtSFVtbuZg+KCvS pGopSruUUv6z+S35GkA3MI9dkjnEKnMHGKAB9PPrxnzTv+pv+s3bk9H7kzbx32mvt2PT6a6jvw/a dK2V5oGboela/NfrQxytqvbddP6tfvOPm+P+5uvT948HfbzHgsa1mv6FVtMa3hv83T/oN+8fjHr3 GDfFY/yoraP3vqNtpFFWz0Z1RnsXaXWtjHJzWsZ1uu9tM/rQaxf6JgxmyCQ9k3Rj3FvfattjVDvm AR1Tmw6wviwYmAZvHgcMpm366Rn7dUrO55WGORna9+i6xniMme17TMTe/HZz+Ph0/+Pm7ePh8Xj/ cPN0vN8Tty1tz48efyFLO0gLokytLoAh2OJBpbHS1nfT2bfQj1/w/+ekMW8/REa1+sNbkmlsbI3e 0hJdh78KwrKjDp5Wdj09YFE8mBYC7SyWpPdVCwvm8R+gBC1Wa9NqVsXVpiv1Xvs+NNaCJJba+q4J vRuc7uJht6YJwbfBxvZBE8lqn9Vs2qhpetv2LU+GMrWuN+bZubSyd00/dD2NVWj5ahtpWViYJQtr NaxrfQ9E5287yCTz0Vbn8WoH49jtDLi8u9W/680/313pbdtYvZEHfaVjx2/85oYfvuY3j/FXbU78 4j6/eEpv9ObIb/660n/o3S/65x2YxlL/XYPh6G/1p6gBSSZkyFO5FA2gQ0EeBh6kJXnHVudDA7uz kD6JhLyPqr2P9WTorLIuGnRqHXRuhaFx/TCS/qTB0qGgQpP5YFfaccX26QYtnEfUUddF5aNVRj22 jbGm7RTWwABuYkmswDPmWqpXtNSOQfvBNKMbo0VsYcjYexs0FJRYYsfGdBaWHdsLPa3nEz+da8a2 Hb3K06fkhKer+janNVO4QsotNe4KnqcJevM9K80h/37Jv6JuokQfkzapzb/yENY3nsrtJ6hb0mYo cdG7SmL1xslat7ZvWtN3AwwmMTHU7WeZiIO3DeKXVbv9xOYKXZhabXSbn06nm9PpEafbfV61C8V2 kbTgObtwLZx62wRSMmgBNdkyoHNsGZO47CtbeEg+NtvJgVuBfN8BwTK6fWqB2B23cxh43iZ8MgUs gkgZ/TYe1OgiaRgHPRDVM956zQ66Ft5jSMFSbW3XjKM1IxvB1jXODgY+Yt0K6tkkui67dhoNnzsl J+xbNYIJqZkFFDpLC/iZNf1TVuepX9UbVmce95S1WUUvWmnzZAdby/Eiq3JIOr3QYZkVw5VrbOfB LtZ/l4NObJ+fuxJmyvpmYfV/zzasN3wo6fhzxe6L7RqVkMI8ZrzMNjrjoGPRsPGoOj9A31ZNoh/g DgnO+RHRn+AcYswIbzvpO0ifcoNtej+Qkcjcqu+u9FYULxsMyaMfbeNpzWApuMV9wE3P+g6w+NwH 5wVcaOI+eC73RZNdo/iSeDO4Pq1KgLhHZIn+Eq7dIQIjyBA8g7uZtIW5qwazSnFmOIWeaaeOE2jl J3bvgjzk4eZKJc8vPfLwwLMksrAOsmElN1wZ1upOtwZowYUxYTkgvbq5sJQFiRWLEQpLYLZEX3Ke eeCcnUIJgl7dwhZJkHPDAPSc8rKtIRc6tjZ1PH+QqAdwD8F4Cx+TqMD4+9ZCDWP7eSLEDQAWxJfe q0zDtfXOXkZjrj5yuGHhg5YsnTteYTF74Axo1SsB7fPOiXg4AL9GUzeUfJAJV30cwrO/qnTTeAR4 OGxQmB0+Rb02HxzyzCB/lz3s3cIQGOs/5RFHHDyZEbwyPahNftAbsZ4jzwLaT4Nv83R+weTmC6oN jwDn09SjENnLAqcTD5PtSE8hne1dZvGcktK8P7Oto8QeOIJ0yhMfQbZzfADBEodeLAA25cL+1541 b0pvTuLUjnxsYYgMEvnw+XmonCS9UBt+MZeKFqkU1i2ywaPw+St7WlngJLviJeTVEYi8R1arN81M GNiV6ZtebXb5hWxLpMPU/jdBGPYARRKyT+EeWMyKyKvJIDnEFz4xs1iGiFrKnk8nuOek2g9CG0Av dekrFXNrXkuWYMpLJvwQKjzmMyutrHRiejxkSUaUUB6ErhxPemS/EFoxgefyX0rQvSEQPaAi1htP zey/uARTmdEseR6RvcYJZb5K8ytyXWOpPkKhg4cvwoQBauu9c6imIKXzHXlKNfOUPZWxfMYXRT9E LUQuzFiR+G2W4F/M6muxHpktfPx3kXuqqSwMrHhE0aAf8iSLIs9N+iOvkAmnHnklvkI2dlULj2sv ZwUwonoHSEM1Nma4ombiL5d2U70VxSdLKad2kZGY0UMcJHFUU1IJC9WO0gedR8kxotHpvFvUfFJt 7uy+sqRnGwNtLEfZI28Wex+SdsTKStKPOIvA7jnyavBybOEA0HViRoK4MoT7sTjB7ZxHCNRV1SJm QN2vgxI6pB8Rxi/DNaDumhJK5BU1YiVkyb5S0VQxYRajATYwVEOkaoHrbRT6EJ+Io3gCnqMzxvf5 +Y5aKo0uJdzq0FOLdoYSLzOgoh8Nln5TC0uAwZ2iWhWWiOPSM5aYzJqzuJaj6wA5wUCcYGngCC1t GyD+raQRxcz3Yt5iPfIgZrSvuF4YWJ12sj5BsVQI0rNCEEBtGAYknjNgsLn58unr4/2XJ/3+HQTL taBLC9Q1XSRnrUEJHyxd4L29nEb8xanE6P/spZePKI7mkSOdqBgg8erpZ7JGijiGEbuBRJAUQogD kmMA+6FpPTuR6mzT6X7s4fwpq8RcXB6gghNiU4wsVnbF+ThKfqGN6TLCGdMMNIO6ydFEpZI+cUik v5ineN4LnI9rB7iHxcbY0aiyWS8OiZYpsy45H921FMUieVV4gKpb4gdoEjfLKHlDtyIrHmhiHqjR OegoGJo8EKUc57WUrHMWEDd/3jxp1lLoAavootAenUSbyizRecTn5EhsF7IbSU/RiYBDaTTcSK7v nNWN7B4Qxinq0zYtnrMLASEq22YnAsmmFrsRGvmw8NM1lyxyUORSSSWWLtoiyx08EMfMeFGLEO9c 4rWYnQCzhaVh1h+K70POntn2pjHjiKMGLu3HgwdceNAFGx9pet+BCnB0iLk42+No5B9jE0Wq3Cy3 cjw+98TwzH1S4D27xwDHBs7FCw9cluVnrBOfVXUZl0dWPXe6nk0mwjAAumXXir4BVS6sxtd0sQRh UapvnZRjUHItTWGRROda6ivUZgBRaLNNGMmm3zL0QhSJYB5ir35V0Yw9j6zvxYo3ZUh2trSpLl2H QS+JI9WVWO6ZVQ4Saq+xydT3Oty9k4sgSwmo80fgnjoSE1k0q5pAggg9ee+zNCqiyPcSfK+npFW+ lbKVR9AYETlg6AipCcDPSx3xeoJls4zsaiO2KA9isHVkj4K7pkw742kOiYy1JCJygYBfyAwJlZI1 SYolOCMHWEXV74TbeZ3T9etgeuhHgjwRUyLVkgDEfdk5XBQalY5SjOJZZyhV1NtmGIOBjkwn5uUq 3fAByHegaiLdpQYXctypwUtHXu289PR56amNSK8CLZmnwlyWUSlanJYykbSXhL+0yupIU4MJhDQC gqvHJx2IznAVhFeU9L3AbEgCnaHUQ2atU2LqGEeXVR0h9dnEbD/wT4SP8OFEh6uMLqCcaAEvLAzo YuRHDXohi833r58+PoEtHPLZVVVWOmVKQix+iuComXbHeccUwSFIzBCcWUFwBmgqug3K6xLy43mC 4C65N8Jii40xgqsMKCO4GAazksfjvADBJfKFBxmnKT9BcIkdPOoVCM78XxAc0Dul/oPGQ8Jucfcp B8yPCb3FkVUGWFz3VCkSdPMTDJNaDN8AbbFWGhef8dnFdNalDDCDN0SKJXJD7ac1Hb7ZWSK3603x C9dX4sdfgONKDXXiMs66CsFxPtB9YoKvHvVQ19N1+kXNcviwo7MkE+Q2KSpT8wXOhcx9wNdk8ARr 8ws53ATlcloZvthVhwQeOos7d0BQqDB7k9qfU7FtUUyToqREwcL25KBxrSLcL2VTCdgSImv3zJ7E cAUDF7TxezYkUHJxiy8hPHWWy1x8L8Z91SUtz9VV353m3ppipe3F0U61fcSagT6sq25uDb4ao04l fbSR1Ee5Mt/cytyqDxtZofhBPQ+WcZuXdsI3t2Qf5UsJKjuhzR9KqPSlx0wZV2lU30skIqgMpa8v Ig11yVhXCc5RN3/MwUZLUk4fqr3+ownRGnCM49dZqH3xyzNEJVgg1Ikv6gCXpG8VbtfJxkxLUBgE WManZf1I2anqEfJivUP6zoTMgG9evMYVKy5acQUI3I1Cd6x7WBRAPMqfcClVHyoyIz5DpKi5mCqB 8+xGFYpWBE9ko7raKGpP+MQGpEsfsj44cPJPtFw9Fcya6daUI+Akst16pXHKI5RdUwdllmBa4v5k jgzxfRyS3WTMJlc+lxzwdZal4gCqjo0bgl/BqKggLnAR0v7LtcMIRBNGLYjy1/8CyRE3XgplbmRz dHJlYW0KZW5kb2JqCjUgMCBvYmoKMzMzNwplbmRvYmoKMiAwIG9iago8PCAvVHlwZSAvUGFnZSAv UGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRzIDQgMCBSIC9NZWRpYUJveCBb MCAwIDEwNzQgNTU1XQovUm90YXRlIDAgL1RodW1iIDI5IDAgUiA+PgplbmRvYmoKNiAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JT cGFjZSA8PCAvQ3MyIDI2IDAgUgovQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDIgMjggMCBSIC9U VDEgMjcgMCBSID4+IC9YT2JqZWN0IDw8IC9JbTkgMjQgMCBSCi9JbTUgMTYgMCBSIC9JbTIgMTAg MCBSIC9JbTEgOCAwIFIgL0ltNCAxNCAwIFIgL0ltMyAxMiAwIFIgL0ltNiAxOCAwIFIgL0ltNwoy MCAwIFIgL0ltOCAyMiAwIFIgPj4gPj4KZW5kb2JqCjI0IDAgb2JqCjw8IC9MZW5ndGggMjUgMCBS IC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMTMwIC9IZWlnaHQgMTM1IC9J bnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDMxIDAgUiAvU01hc2sgMzIgMCBSIC9CaXRzUGVy Q29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB7dAxAQAAAMKg9U/t bwaIQGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgIEfGM2qAAEKZW5kc3RyZWFtCmVuZG9iagoyNSAwIG9iagoyNTMKZW5kb2JqCjE2IDAgb2Jq Cjw8IC9MZW5ndGggMTcgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGgg MzkgL0hlaWdodCA3MCAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSAzMSAwIFIgL1NNYXNr IDM0IDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVh bQp4Ae3QAQ0AAADCoPdPbQ43iEBhwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMfA8M H/4AAQplbmRzdHJlYW0KZW5kb2JqCjE3IDAgb2JqCjU5CmVuZG9iagoxMCAwIG9iago8PCAvTGVu Z3RoIDExIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEzMCAvSGVp Z2h0IDQ5IC9JbnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDMxIDAgUiAvU01hc2sgMzYgMCBS IC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB7dAx AQAAAMKg9U/tbwaIQGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDgBwZKpgABCmVuZHN0cmVhbQpl bmRvYmoKMTEgMCBvYmoKMTA3CmVuZG9iago4IDAgb2JqCjw8IC9MZW5ndGggOSAwIFIgL1R5cGUg L1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzAgL0hlaWdodCA2MCAvSW50ZXJwb2xh dGUKdHJ1ZSAvQ29sb3JTcGFjZSAzMSAwIFIgL1NNYXNrIDM4IDAgUiAvQml0c1BlckNvbXBvbmVu dCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QAQ0AAADCoPdPbQ43iEBhwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg4G9gW2gAAQplbmRzdHJlYW0K ZW5kb2JqCjkgMCBvYmoKMTI1CmVuZG9iagoxNCAwIG9iago8PCAvTGVuZ3RoIDE1IDAgUiAvVHlw ZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEzMCAvSGVpZ2h0IDEzNSAvSW50ZXJw b2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSAzMSAwIFIgL1NNYXNrIDQwIDAgUiAvQml0c1BlckNvbXBv bmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QMQEAAADCoPVP7W8GiEBh wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwICB HxjNqgABCmVuZHN0cmVhbQplbmRvYmoKMTUgMCBvYmoKMjUzCmVuZG9iagoxMiAwIG9iago8PCAv TGVuZ3RoIDEzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEzMCAv SGVpZ2h0IDUxIC9JbnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDMxIDAgUiAvU01hc2sgNDIg MCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB 7dCBAAAAAMOg+VNf4AiFUGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDf2BNsgABCmVuZHN0 cmVhbQplbmRvYmoKMTMgMCBvYmoKMTEwCmVuZG9iagoxOCAwIG9iago8PCAvTGVuZ3RoIDE5IDAg UiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDM5IC9IZWlnaHQgNzAgL0lu dGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgMzEgMCBSIC9TTWFzayA0NCAwIFIgL0JpdHNQZXJD b21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt0AENAAAAwqD3T20O N4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDHwPDB/+AAEKZW5kc3RyZWFtCmVu ZG9iagoxOSAwIG9iago1OQplbmRvYmoKMjAgMCBvYmoKPDwgL0xlbmd0aCAyMSAwIFIgL1R5cGUg L1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzAgL0hlaWdodCA2MCAvSW50ZXJwb2xh dGUKdHJ1ZSAvQ29sb3JTcGFjZSAzMSAwIFIgL1NNYXNrIDQ2IDAgUiAvQml0c1BlckNvbXBvbmVu dCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QAQ0AAADCoPdPbQ43iEBhwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg4G9gW2gAAQplbmRzdHJlYW0K ZW5kb2JqCjIxIDAgb2JqCjEyNQplbmRvYmoKMjIgMCBvYmoKPDwgL0xlbmd0aCAyMyAwIFIgL1R5 cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAzOSAvSGVpZ2h0IDcwIC9JbnRlcnBv bGF0ZQp0cnVlIC9Db2xvclNwYWNlIDMxIDAgUiAvU01hc2sgNDggMCBSIC9CaXRzUGVyQ29tcG9u ZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB7dABDQAAAMKg909tDjeIQGHA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgx8Dwwf/gABCmVuZHN0cmVhbQplbmRvYmoK MjMgMCBvYmoKNTkKZW5kb2JqCjI5IDAgb2JqCjw8IC9MZW5ndGggMzAgMCBSIC9UeXBlIC9YT2Jq ZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMjU2IC9IZWlnaHQgMTMzIC9Db2xvclNwYWNlCjMx IDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0RDVERlY29kZSA+PgpzdHJlYW0K/9j/ 4AAQSkZJRgABAQAASABIAAD/4QBMRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6AB AAMAAAABAAEAAKACAAQAAAABAAABAKADAAQAAAABAAAAhQAAAAD/7QA4UGhvdG9zaG9wIDMuMAA4 QklNBAQAAAAAAAA4QklNBCUAAAAAABDUHYzZjwCyBOmACZjs+EJ+/8AAEQgAhQEAAwEiAAIRAQMR Af/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQEC AwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNE RUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqy s7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEB AQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEH YXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZX WFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLD xMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/bAEMAAgICAgICAwICAwUDAwMFBgUF BQUGCAYGBgYGCAoICAgICAgKCgoKCgoKCgwMDAwMDA4ODg4ODw8PDw8PDw8PD//bAEMBAgICBAQE BwQEBxALCQsQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ EP/dAAQAEP/aAAwDAQACEQMRAD8A/fyiql1f2NkUF5cR2/mEhfMcLuI5OMkZxVf+2tG/5/7f/v6n +NAGnRWZ/bWjf8/9v/39T/Gga1o5ZUF/AWdlVR5q5LMcADnkknAHc0AadFFFABRRWa2s6QjvE99A rxkqymVQVYdQRng0AaVFZn9taN/z/wBv/wB/U/xo/trRv+f+3/7+p/jQBp0VUttQsL13js7mKdow CwjdWKhs4JAJxnBx9DVugAooqjPqem2s32e6u4YZdobY8iq20kgHBOcEg4PsaAL1FZn9taN/z/2/ /f1P8aP7a0b/AJ/7f/v6n+NAGnRVCHVdLuJlt7e8hllcEhFkUsQOuADnir9ABRVS51CwsmRLy5ig aQEqJHVSwXGSMkZxkZ+oqv8A21o3/P8A2/8A39T/ABoA06KzP7a0b/n/ALf/AL+p/jTk1jSJJEhj voHkkO1FEikscZwBnk4FAGjRRWTda5plnO1tPKfMTBYLG74zyMlQQDjtQBrUVg/8JLo//PWT/vzL /wDE0f8ACS6P/wA9ZP8AvzL/APE0Ab1FZdnrWm38/wBmtpSZdpfayOhKggEjcBnBI/OtSgAorDfx Ho6SPEZmZo2ZG2xSMAynDDKqRwQQfem/8JLo/wDz1k/78y//ABNAG9RWD/wkuj/89ZP+/Mv/AMTV +x1Sx1HzBZybzFjcCrIRuzg4YA4ODzQB/9D91tZmNvq2nSps3iO52iR/LQnC4BbDY+uD9Ki/trV/ +eOnf+B7/wDyPXST2ttdKEuokmUHIDqGAPrzVX+xtI/58YP+/S/4UAZEms6mCPKi09hgZzfMOccj /UHgHoe45wOlV7/Umn0+JbxraOY3loAsM/nAj7RFjkohz14x/PjUs9G0gQtmxgH7yX/lko/jb/ZX +X4t1N2PStMidZIrSFHU5BEagg+xxQBfooooAK41Y9QgivLCXTLmaOa4lkEkE8cRKu+8YYSo49+n p0rsqKAPJprm+hXc/hXXsFlX/kKxdWIUf8v/AKmtbS5tQS4Lnw5q9uVHBn1CKZDz02/bJBn6iu2v yBApJx+9h7gdZF9Sv8/wPQ3aAOe01b6bV7zULqze0jkgt4kEjIzExtKzH5GYY+cda6GiigArm7i4 lsNcuLlrWeaKe2gRWiTeN0bylgeeOGFdJRQB5zf67qiagz2+n65JCCpCww2flHAGQPNIk575P0PS lsNZ1Fp7aeS31topV3ss0FqEXOcK4QB8/wC7n3PWvRaqaeMWFsAMYiTjGMfKOwC4/wC+R9B0oAwT czalq2nyR2k8SWxlZ2lTYAGQqOp55PSupoooAxbueCDWrNp5FjBt7gAsQBnfD61DeavdJLt08WU0 WB80t2Ymz6bVicY98/hWxcWdpd7RdQJNtzjeobGfTNVv7G0j/nxg/wC/S/4UAZMOs6k0qCePT0iJ G5lvmZgO5CmBQT7ZH1o1m9s5pNMjinjdjeR4CsCTw3YGp9N0XSRZoDYQDluPKUfxH/YT/wBBH49a 04dN063kE0FrFG69GWNQRnjqBQBdrB03/kM6v/vw/wDooVvVz1irPqutIrmMs0QDLjKkxDkZBGR7 gigDoaK469tdatZFSC71O8BGS0Q08AH0PmIhz9Bin2NnrN3v8++1Ky2Yx5wsDuznp5cb9O+cdeKA NOf/AJGOx/69Lv8A9GQVt1iT/wDIx2P/AF6Xf/oyCtugDB8Of8g+b/r8vv8A0plrerB8Of8AIPm/ 6/L7/wBKZaeuq37bs6NdrtGRlrb5j6DEx5+uBQBt1g2f/Ixan/1xtf5y1esb25uy4nsJrPbjBlMR 3Z9PLkfp74qjZ/8AIxan/wBcbX+ctAH/0f38ooooA5uLQrG582d5LlWeWUkR3c8a53t0VJFUfgP1 5qb/AIRvT/8Antef+B11/wDHay4IPF8mo3Elte2Uem75RErQvJIDuwQ+JQCd27BDLgYUpnJGp9n8 Uf8AQQs//AOT/wCSKAD/AIRvT/8Antef+B11/wDHaP8AhG9P/wCe15/4HXX/AMdo+z+KP+ghZ/8A gHJ/8kUfZ/FH/QQs/wDwDk/+SKAD/hG9P/57Xn/gddf/AB2j/hG9P/57Xn/gddf/AB2j7P4o/wCg hZ/+Acn/AMkUfZ/FH/QQs/8AwDk/+SKAKx0K30+b7bDdXbkvEojluppIxmRckK79T7k/TsenrxyE fGKD4g3lrqt7ot74WuoY5bCGKC4t76OWAxmYyyl5Y9hY/KoQnuWH3a7fTNQ1HxHFaX0aNYWW2OVu cvK+AxVSQMRg8FsAv2AXkgHWUUUUAFFFFABVPT8fYLbHTyk6f7o9OKuVU087rC2bOcxJznOflHcF s/8AfR+p60AW6KKKACiiigChpgAskAwBlumP7x9AKv1Q0whrJCCCMtyCD/Ee4Lfz/wAKv0AFYOm/ 8hnV/wDfh/8ARQrerKl0axluZbs+aks23eY55YwdowOEYDOPagCH/hGvDhQxf2VabGO4r5EeCw74 x15PNS2ug6HYTC4sdOtreUcb44URsfUDNVr3SLaOzneOW5VljYgi6nyCAcfxH+R+hqz/AGLZ/wDP S5/8Cp//AIugCKf/AJGOx/69Lv8A9GQUmv2euX1mkPh/UU0y5D5MrwicbdrcbCVzlsZ5BwDg1Zt9 Jsra6W9j81plRowZJpZMK5UsAHYjkqOcZ4rToA5fwfHdQ6K0d7MLidbu+3SBdgY/apeQuTj6ZNdR WOuhafGXMRnjEjvIQlzMq7pGLsQA+BliTxVa90i2jhVo5bpSZIhxdT9DIoI+8eo9vxHUAHQ1g2f/ ACMWp/8AXG1/nLVj+xbP/npc/wDgVP8A/F1PZ6baWMks0AcyTBQ7PI8hITO0ZdjjGT0oA//S/fyi iigCrZkmFiTn95L3z/G3qW/n+A6C1VWzz5LZ/wCekvX/AH29atUAFFFFABRRUc0qwRPM4YqgyQql 249FUEn6AUAc5qt7Z2Gv6bNfTx28Zgul3SMEXJaHjJxzV7w4yt4e0tlOQbWAgjoRsFYt/wCIhfTw 6VoUcd1eODP5dw7W+1YHQ8ho3bksP4ePrXN/D/XPi1rOhyah430DSdOu5biU28dnqE0sZsyQYHZm tgd7KfmGFweAMckA9XorB+0eKP8AoH2f/gZJ/wDI9H2jxR/0D7P/AMDJP/kegDeorB+0eKP+gfZ/ +Bkn/wAj0faPFH/QPs//AAMk/wDkegDeqpYEmxtyTkmNOTz2HqSf1P1rn7q78arNbra6bZGNm/ek 3Uhwvt+5XB/Bvw610FgCLG3BGCI068dh6gH9BQBbooooAKKKKAKOmsWs0YksctyST/Ee5Zv5/l0q 9VHTc/Y0znOW65/vH1q9QAUUUUAU9QIFhck9PKfr/un1wKuVU1A7bC5bOMROc5xj5T33L/6EPqOt W6ACiiigAqjqGBbpn/ntD1x/z1X1xV6qWoHbApzj97COuOsi/wC0v8/wb7pALtFFFAH/0/38oooo AqWQxCwxj95L2x1kb/ZX+X4nqbdVLIAQtgY/ey/+jG9AP8+vWrdABRRRQAUUUUAc3qNxb23iLTXu JViU290MuwUfeh9at+HGV/D2lspBBtYCCOhGwVJrMUctnloVnZZIyqtgZO9eMkjGen8wehqre62q hV0lQBwALhcAf980Ab9FYP2/Xf8AoFL/AOBC/wDxNH2/Xf8AoFL/AOBC/wDxNAG9RWD9v13/AKBS /wDgQv8A8TR9v13/AKBS/wDgQv8A8TQBvVU08bbC2XGMRJxjGPlHbav/AKCPoOlZn2/Xf+gUv/gQ v/xNVNPv9c+wW2NKXHlJ0uF/uj0XFAHU0Vg/b9d/6BS/+BC//E0fb9d/6BS/+BC//E0Ab1FYP2/X f+gUv/gQv/xNRPqmvRyRp/YxcSNglZ0wo7k5A4+nPtQBq6au2zQYxy3GMfxHttT/ANBH49avVQ0w AWSAAAZboAP4j6Afyq/QAUUUUAVL/Isbgjr5b9M+h9MGrdVL8FrG4AGSY34Az2PYBj+h+hq3QAUU UUAFUr8kQLj/AJ6w9M/89F9CKu1SvwTAoAz+9h6AnpIvoG/l+I6gAu0UUUAf/9T9/KKKKAKlkQYW wc/vZehz/wAtG9Cf89h0FuqlmcwsSc/vJe+ejt7t/P8AAdBboAKKKKACiiigCnfZ8lcf89Yumf8A novpVyqd8MwKMZ/ewnpnpIv+y38vxX7wmguLe5TzLaVZUyRuQhhkcEZHpQBNRRRQAUUUUAFcnp/i ax+yxRtb3uERAHFncOr8dVKq4I98kHqCRzXWVUsCTY25JyTGnJJPYdySf1P1NAGZ/wAJJp//ADxv P/AG6/8AjVH/AAkmn/8APG8/8Abr/wCNVvUUAYP/AAkmn/8APG8/8Abr/wCNUf8ACSaf/wA8bz/w Buv/AI1W9RQB5Bp3w08N6v4wg+Kf2/WFv3sZrAW39o3kNl5TyoxcWfmBI5MxAblCk5O4E4x6D/wj en/89rz/AMDrr/47WhprFrNCTu5bnJP8R7ln/n+XQXqAMH/hG9P/AOe15/4HXX/x2j/hG9P/AOe1 5/4HXX/x2t6igDldQ8Nac1hcqZbwgxPwb25OflPYyMD/AN8n6HpVz/hG9P8A+e15/wCB11/8drS1 HH9n3OenlP1/3T68VcoAwf8AhG9P/wCe15/4HXX/AMdo/wCEb0//AJ7Xn/gddf8Ax2t6igDB/wCE b0//AJ7Xn/gddf8Ax2s2Pwtp+lXU2pW8tzLJcSQgpNcSSxj96hyEfeC3yjDEFhyAyjkdhVHUMfZ0 zj/XQ9cf89V9aAL1FFFAH//V/fyiiigCrZ58ls/89Jf/AENvWrVVLMYhYEY/eS9sdXb2X+X4nqbd ABRRRQAUUVFNNDbRNPcSLFGgyzMQqgepJ4FAFTU4oprTypkWRHkiDKwBBBkXgggj/P41QHhTwsBg aPZj/t3j/wDiag1nWY1t4otNQ39xORJEsOGUiJ0LEncMAZGcEn0B6Vx3w+1H4v32gte+PbPRPts8 8klv/Z1xciH7G2DBu86It5m37/bPQUAdz/winhf/AKA9n/4Dx/4Uf8Ip4X/6A9n/AOA8f+FHneJ/ +fOz/wDAmT/4xR53if8A587P/wACZP8A4xQAf8Ip4X/6A9n/AOA8f+FH/CKeF/8AoD2f/gPH/hR5 3if/AJ87P/wJk/8AjFHneJ/+fOz/APAmT/4xQAf8Ip4X/wCgPZ/+A8f+FVLHwp4Y+xW+7R7PPlpn NvHnoPVQf0ptzL41ae3Fpb2Mce796Wmkf5eOn7tCD1x1HrXQaeNthbLjGI04xjHyjttX/wBBH0HS gDM/4RTwv/0B7P8A8B4/8KP+EU8L/wDQHs//AAHj/wAK3qKAMH/hFPC//QHs/wDwHj/wo/4RXwwO f7Hs/wDwHj/wreooAo6bn7Gm7Oct1z/ePrV6qOmqVs0BG3luMEfxHsVT+X59TeoAKKKKAKeoHbYX LZxiJznOMfKe+5f/AEIfUdauVUvyRY3BHB8t+mR2PoQf1FW6ACiiigAqlqB2wKc4/ewjrjrIv+0v 8/wb7pu1SvyRAuDj97D0z/z0X0I/z69KALtFFFAH/9b9/KKKKAKlkAIWwMfvZegx/wAtG9AP89z1 NuqlkQYWwc/vZf8A0Y3oT/n06VboAKKKKACggEYNFFAHLSafYWvimxuLa2ihlktroM6IqswDQ9SB k1o+Hv8AkAaZ/wBesP8A6AKg8QWFtdWyXEsDzywMoQROY5CHddyhgy/ewM5IHrUVvqN3awR21voN 4kUKhEXfa8KowB/r/SgDpKKwf7Y1D/oB3n/fdr/8fo/tjUP+gHef992v/wAfoA3qKwf7Y1D/AKAd 5/33a/8Ax+j+2NQ/6Ad5/wB92v8A8foA3qp6fj7BbY6eUnT/AHR6cVm/2xqH/QDvP++7X/4/VOw1 m/NhbEaJeMDGnIe1IPyjnP2hv5n6mgDqqKwf7Y1D/oB3n/fdr/8AH6P7Y1D/AKAd5/33a/8Ax+gD eorB/tjUP+gHef8Afdr/APH6P7Y1D/oB3n/fdr/8foAv6YALJAAAMt0AH8R9Av8AKr9clpmsX/2J NuiXbDLch7Uj7x9Lg/zq/wD2xqH/AEA7z/vu1/8Aj9AG9RWD/bGof9AO8/77tf8A4/R/bGof9AO8 /wC+7X/4/QBp34JsbgAZJjfgDPY+gJ/Q/SrdcrdazdTLJYS6LeRCWKQmRxA0SjafvFZJPy2sT/dI rqqACiiigAqlfgmBQBn97D0BP/LRfQH/AD3HUXao6gA0CAjP72E9Aeki+qt/Lj1X7wAL1FFFAH// 1/N/+H3fxb/6Jxof/gRc/wCNH/D7v4t/9E40P/wIuf8AGvxHooA/bVP+C2/xajUqvw40TBJPN1dH ljk9W9+B26Din/8AD7v4t/8AROND/wDAi5/xr8R6KAP24/4fd/Fv/onGh/8AgRc/40f8Pu/i3/0T jQ//AAIuf8a/EeigD9uP+H3fxb/6Jxof/gRc/wCNH/D7v4t/9E40P/wIuf8AGvxHooA/bWT/AILb fFiVQsnw20MgFW5uLnqpBHf1FP8A+H3fxb/6Jxof/gRc/wCNfiPRQB+3H/D7v4t/9E40P/wIuf8A Gj/h938W/wDonGh/+BFz/jX4j0UAftx/w+7+Lf8A0TjQ/wDwIuf8aP8Ah938W/8AonGh/wDgRc/4 1+I9FAH7cf8AD7v4t/8AROND/wDAi5/xpkf/AAW3+LUaLGvw40TCgAZurpjgepLZP1NfiVRQB+3H /D7v4t/9E40P/wACLn/Gj/h938W/+icaH/4EXP8AjX4j0UAftx/w+7+Lf/ROND/8CLn/ABo/4fd/ Fv8A6Jxof/gRc/41+I9FAH7aRf8ABbb4swoI0+HGiYGet1dseeepYmpP+H3fxb/6Jxof/gRc/wCN fiPRQB+3H/D7v4t/9E40P/wIuf8AGj/h938W/wDonGh/+BFz/jX4j0UAftpL/wAFtvizNE8Mnw30 Mq4KkfaLnoeD3qT/AIfd/Fv/AKJxof8A4EXP+NfiPRQB+3H/AA+7+Lf/AETjQ/8AwIuf8aP+H3fx b/6Jxof/AIEXP+NfiPRQB+3H/D7v4t/9E40P/wACLn/Go5f+C2vxYmUJJ8N9DIDK3/Hxc9VIYd/U V+JdFAH7cf8AD7v4t/8AROND/wDAi5/xo/4fd/Fv/onGh/8AgRc/41+I9FAH/9kKZW5kc3RyZWFt CmVuZG9iagozMCAwIG9iago2MTQ5CmVuZG9iagozMiAwIG9iago8PCAvTGVuZ3RoIDMzIDAgUiAv VHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEzMCAvSGVpZ2h0IDEzNSAvQ29s b3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4 IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2by08aURjFYR4V5gEdXiJRQQYXWNTy SJSFxkoKVjcKMbZBSRutC51EbcU0jZoYobgoqdG0TNyUtqMLkgq6QNPS+K91RoqATZe3adLvLIis 5vNwz+HeG34qFehfdECNVH/+j9VqDMMJgvwLIggcw9Tq5lnkxxNki4aiaYZhkYphaJrStJCEPETj DBhOamjdXYPJbGlFLIvZZLirozUk3jgCht/RspzF1uFw8i7E4p2ODpuFY7V3cKxuAkZqdUabo7un z+sPIJbf29fT7bAZdVqyboKa0LBGG+/xB4dD4cgYUkXCoeGg38PbjKyGuFkJGElzbXxfMDQRfRxP IFb8cXQiFOzj2ziavPkYsBbW7PAEI7HEorC2nkSq9TVhMRGLBD0OM9tSn0Cjb+v2h2LPhI3tVGYP qTKp7Q3hWSzk727Ta/DaUsS1XIc7ODEnvE5nD3MiUuUOs+nXwtxE0N3BUURtAoIy2nuHo8830vtH n6QTpJI+He2nN55Hh3vtRro+AW3quj86I2xnj6RCsYRUxYJ0lN0WZkbvd5lo8sYD2sz7HsZXU4f5 wnn5EqnK54X8YWo1/tDHm5mGCSx8IDL3MpOTiuXvFaT6Xi5KuczLuUiAt9QnIJlWV2AskdwTT0qX lSukqlyWTsS9ZGIs4GplyVolwQQqFXgAHiitBOsAPIB1UP1+hixAFiALkAXYJ8JeGc4LcGaCcyOc neH+AO5Qrq7AA/BAuaiEdQAewDqoXtlDFiALkAXIQtUByAJkAbIAWag5AH0AfQB9UEsD7JWhD6AP oA+gD2oOQB9AH0Af1NIA+wPoA+gD6APog5oD0Af/dh8oFEliPSMely4qP5CqclE6FjPriWaKhKDl CcIyx/JBOi1/Q4qxVL6VT6UPMscSbuJYiF8sz+5BvnBWvkCq8lkhf7D7O8tzzTMtb2XFz4WvRaT6 WvgsZreWb/FMuMJ0DU0tJFPvxI9fJKT68lF8l0ouTA01MV0y19buHhyfFV6l3h68zyHV+4O3qVfC 7Pigu72Ba8Nkts/lG40+XU5u7qTfIFV6ZzO5/DQ66nM1sn0K32i/NxiOxueXVl4g1srSfDwaHrxn b+IbSYqzOnsHHjyanH4Sn0Wq+JPpyUcPBnqdVo6qM54y58oYbM4e78DQSCiMWKGRoQFvj9NmYBo4 V5XM+rIGq93l9vR7fX6k8nn7PW6X3WpgZda3+oNt5VUBrhnOZG3vlIFnxHI6OtutJo5RkOv6BNcj UKyeM8rQN2KZTUZOz1K3BpBduObetTL4jl6Utsq9Nzhw/afC/svwP3L6X34ErrD/t58P7/9zB34C YwQP5AplbmRzdHJlYW0KZW5kb2JqCjMzIDAgb2JqCjk5OAplbmRvYmoKMzYgMCBvYmoKPDwgL0xl bmd0aCAzNyAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzAgL0hl aWdodCA0OSAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1Bl ckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2Y70sacRzHz/uh 5513dXpqXklnp0ZioukatmE0Ny0MBoYUiFctEoIDi8zaiGJgXDRqYy764ZM1nIM2SApaY8H+tZ2D PCP28Bs98PXwHtznfe/vh/t8vm8IavEQHdAA5f9frNHAMIKi2D2AoggMazS3tSjlUUyHEyRpMFBA MRhIksB1GKqIaNYAIxhO0u1G1myxAsZiZo3tNIljSLMEGNHqKcbC2fkewQkYoYe3cxaG0msRWDUB xvS0ieNdHl8gGAJMMODzuHjOROsx1QQNilMmTvAGw5FoLD4KlHgsGgkHvQJnonC00QkwRjI2wReO JpJTaREw6alkIhr2CTaGxBrHAOsoM+8NxyfErLSUXwFKfknKihPxsJc3UzpVAd5mcwWjE7NSYaMo bwNFLm4UpNmJaNBla8ORm1ZE9Iy9L5zISG+2dksHh0A5KO1uvZEyiXCfnSHQGwUoYerujyTnC1sf jk8qVaBUTo4/bBXmk5H+bhOpKiBZh//ZpLSxe1w5PasB5ey0cry7IU0+8ztYEmt4QJqFgRfpxWLp 8+n55RVQLs9PP5eKi+kXA4LZ0KTAIoTimWX5oHJ2+fsaKL8vzyoH8nImHhIsqgLMYHWGRsWV7cNq 7er6D1Cur2rVw+0VcTTktFLYzS+ppQCCWh60PKj/lVp90PLgYfQBStYnk5i/v8mUF29PprqCgVh6 qfjp5PvFz19A+Xnx/eRTcSkdG2iejaiyoQSiU9LmXvnrj9o5UGo/vpb3NqWpaODWhkKwvG84mV2T P5a/VL8Bpfql/FFeyyaHfTyrbmmI3mj3DI2LuXX5/f5RGShH++/l9Zw4PuSxG9VNFcbbOXfoeWou 9/qtvPMOKDvy29e5udTzkJtrV7d1WEdbeO/QWGpmIZdfXQPKaj63MJMaG/LyFhpXbyzKrY1z+p/E XqbS07OvgDI7nU69jD3xOzmG1DYUKDdXmu1y+R49HYmNJcaBkhiLjTx95HN1sXTTzRWCMYJmOUev 1x8cfAyYwaDf2+vgWJrAkJtFFYJgVEvQRmtnd4/T7e4Fitvt7OnutBppQos2DgGCNIoEJcVhWLO1 wwaYDquZZZQURxGgWlCXgGBaJcgyUDRwKIMSZWlvx0j1+fgvzKtHeVrA1Gv8i/PqVe8ANMtsevmd wq0HLQf+AleTjhMKZW5kc3RyZWFtCmVuZG9iagozNyAwIG9iago4NzkKZW5kb2JqCjQyIDAgb2Jq Cjw8IC9MZW5ndGggNDMgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGgg MTMwIC9IZWlnaHQgNTEgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUg L0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHtmLFP 4lAcx0v7npS+FkVoSZsQq4VBg0QtSxcGG4WEDQZNSIkOOnXQIAwOTBBYSEwYIEyYEAYWiAMhkeT+ tat4UM67Gx81uX6Gpp367fe9tr/vlyBcvqMDHqz8+4k9HpKkAIAbAACKJD2e37VYtwfQSzMIsSyH FZZFiKG9EFgi1jWQFKSRf2c3xAthzAh8aHfHj2hIrUsgqS0fFxCkiHygRDGjHMgRSQhwvi2KtE0g oc8flOTYUeJUTWJGPU0cxWQp6PdB2wQPoLmgpMRVLaVfpjNYSV/qKU2NK1KQo8FqJ5AQBUQloenZ 3HWhiJnCdS6rawlFDCC4WgbSy/FyXEvni/fm41MZK0+P5n0xn9biMs95bQX0thhT9fytWanWGk2s NGrVinmb19WYuE1Ty61I+QKRQy1rmM/1VrvTxUqn3ao/m0ZWO4wEGLBUAJjg3nEqd1epv/ReB0Os DF57L/XKXS51vBdEtgIU2j85vzKrrd5gNJ5gZTwa9FpV8+r8ZD+E4MoDxCtnF4WHWrs/epvOsDJ9 G/XbtYfCxZnCs2sKBCWZNkqNzmA8fZ9j5X06HnQaJSOdVARbAWTD0WSmWG52h5PZ/AdW5rPJsNss FzPJaJiDy0+Sq4AgXA9cDz6+Su4+cD1w98Hn/9l9FwgCIKfnA/ANZiSn50RqbVbu456V+3+blZ3P C+SvzHSzqcx08zUzrXKjYeXGEtbYWC5ZudH4MzdCxonszNjZ2fn+gFh0KOImOxRx0aF8/hQ+js73 SJYEh7s0ywW7T2Qxs+oT7TVYnDndqX6R417+dw78BD7Xc8AKZW5kc3RyZWFtCmVuZG9iago0MyAw IG9iago2MTEKZW5kb2JqCjQ4IDAgb2JqCjw8IC9MZW5ndGggNDkgMCBSIC9UeXBlIC9YT2JqZWN0 IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMzkgL0hlaWdodCA3MCAvQ29sb3JTcGFjZQovRGV2aWNl R3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRl RGVjb2RlID4+CnN0cmVhbQp4Ae2W70sacRzHvV96+vUuLz0Pb91yXa4Vt8p0g6smkZsKNQQl1rCE BnMUQltpDwqsIFH6wZKKpKAZmQNpKIXlUOhf213DHwv2fIxeD+7R+/v5/uA+n/dbofgngCDo7+eA IBhGUBSrgaIIDN9fIGlQTIVrANBqCYLQagHQ4CoMlZTNlWEEwwGpazXQRkbGSBtadSTAMaRZByNK NUEZWc7cwXfK8B1mjjVShFqJwI1yMKYm9azZ0tNrtdllbNbeHouZ1ZNqrFEOQnFCz/KCTXQ4XW6P x+N2OR2iTeBZPYGj9dPBGKBMfK/oHPNNBoIygUnfmFPs5U0UwOq7wiqCNgui2x8Mhb9EotFo5Es4 FPS7RcFME6qGDG8xWWxO/0x4KbaRSCaTiY3YUnjG77RZTC04UrsDoqa4bnFsOrwc39k7TKfTh3s7 8eXw9JjYzVEatCZDNfr25w7fx6X47tFpNpfLZU+PduNLH32O5+160JABw5P+0Xfh2M5RNl8oFouF fPZoJxZ+N9r/xACwejVA8wNvAp839jL5y+tyuXx9mc/sbXwOvBngaW2TzMjb3dOLicNs4bpSrVYr 14XsYWJx2m3njQ0ZpmU67Z5gNJnOFcvV29vbarmYSyejQY+9kyGw2vs+yB4e5OEP+d2CD73w//UC CuRpGYwk0ufFm7sxeFM8TyciwT+npSyzuaYW4gdnP0o/K5XKz9KPs4P4wpTL1jxUUUB3WF+/n19P nXwvXJVKpavC95PU+vz719YOunmSG8x9IxOzK5sH33L5i4uLfO7bwebK7MRIn7lp4COaVk4Y9s4s rG3tH59kMpmT4/2ttYUZ77DAtTZcBsGpR10v3ZOfIrHE9tdUKvV1OxGLfJp0v+x6RKnrngXjJMP3 Od4GQvPRldjq6mpsJTofCrx19PEM2bA2WAn0XJd9ZHxi6kNodm5ubjb0YWpifMTexemBsm6UkOTh xsfPrIOjnnGvT8Y77hkdtD57bJRdvOZZEKIEOoazCNYX4tArmSHxhVWwcIwOKJGaySgUMIoDHc22 80+7ewSZnu6nfDtL6wCO1ospFBCMqTQkZWBMbBsn08aaGANFalRNwUHaG5JCjZRpCFJH/UZHElKu kWJNY0v5iHJCwjClCq+hUmJSpLmnuruMnKaauJ+j7jT/4ucXbcyBcAplbmRzdHJlYW0KZW5kb2Jq CjQ5IDAgb2JqCjg3OAplbmRvYmoKMzggMCBvYmoKPDwgL0xlbmd0aCAzOSAwIFIgL1R5cGUgL1hP YmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzAgL0hlaWdodCA2MCAvQ29sb3JTcGFjZQov RGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIg L0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2Z/0sTYRzHd1+e3W3P7bZzdzs8mVueirNLmxvCyoa4 cgPTYkMy5gYaKdLAsrkfElaBYxKNEjGHgRnNBaPYKDTDRf9at8LdDPrxkX641w/3672f9/N5vnze j8Gg8z86gCHl3yPGMBwnSBKcAyRJ4DiGndWi/p4EFG2GkGEsSGEYCM00BUhVRKsGnAA0ZG1tvOAQ EeMQ+DYbC2lAtErACaPJwjkkp7tL7kaM3OV2Sg7OYjISuGYCDkysXXL39A94fX7E+LwD/T1uyc6a gGYCRtIWuyQrvkAwNB6OICU8HgoGfIos2S002awEHECuXR4IhCaiM/EkYuIz0YlQYEBu5yBoTgNO WQS3EgjHkgupR+lVpKQfpRaSsXBAcQsWSlNAW9t7fKHYXCqTXc9vICW/ns2k5mIhX0+7lSZOS5Ew cU5PYCKRepIrbO0UkbKzVcg9SSUmAh4nZyZPFZBmu+tSMHo/k3u9+75URkrp/e7rXOZ+NHjJZYea AshfuDx2J5Ut7JYq1RpSqpXSbiGbujN2+QIPQdMDKMhDN+IP17f2K1+OjpFy9KWyv7X+MH5jSBaY FgUO2R9OPM7vlKpHJ3WknBxVSzv5x4mwX3ZoCgAjdvsjydWNYrl2XP+JlPpxrVzcWE1G/N2iBZxu SboCg0H3QPegsSvpdaB7oNfBn/NZXwv6WtDXgr4W9HuidlcmYaNfSKbzxYPat/oPpNS/1Q6K+XTy bL/QUOAbn13JbX/4fPj9BCnfDz9/2M6tzI77WjsWEgpd3ut3l59v7n2sfj1Eytfqx73N58t3r3u7 znRtvHtwdHpp7cWbd+XKJ6RUyu/evFhbmh4ddLd0roS5rVMZuTW/8uzl9tu9faTsvd1++Wxl/taI 0tmm5QcEzXX0DYdnFtPZfOHVJlJeFfLZ9OJMeLivgzM1MxScZkV5MDgVX1jOrGWfIiW7llleiE8F B2WR1VIc3Mjwzj7/6M3pxL3FpQdIWVq8l5i+Oervc/KMsZlkYcBkdbg8Q1fHIpO3ozGkRG9PRsau DnlcDqsaaf45lwwGjDBCTuzsVbzDV0auBZFybeTKsFfp7RQ5SBGnx4LBgKu5tk2QXHKv56KCmIue XtklCTY1225aoJqAA8rMcrwodTiR0yGJPMdCqiVWVicDU58XaDPDWm0ccmxWljHTRlLLtX9XQ+OF BQAjRZ8DlBGojwt/CWioUJ+X8HNC/dXvcesf3YGmA78ATU0n4AplbmRzdHJlYW0KZW5kb2JqCjM5 IDAgb2JqCjkyNgplbmRvYmoKNDAgMCBvYmoKPDwgL0xlbmd0aCA0MSAwIFIgL1R5cGUgL1hPYmpl Y3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzAgL0hlaWdodCAxMzUgL0NvbG9yU3BhY2UKL0Rl dmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHtm8tPGlEYxWEeFeYBHV4iUUEGF1jU8kiUhcZKClY3CjG2 QUkbrQudRG3FNI2aGKG4KKnRtEzclLajC5IKukDT0vivdUaKgE2Xt2nS7yyIrObzcM/h3ht+KhXo X3RAjVR//o/VagzDCYL8CyIIHMPU6uZZ5McTZIuGommGYZGKYWia0rSQhDxE4wwYTmpo3V2DyWxp RSyL2WS4q6M1JN44Aobf0bKcxdbhcPIuxOKdjg6bhWO1d3CsbgJGanVGm6O7p8/rDyCW39vX0+2w GXVasm6CmtCwRhvv8QeHQ+HIGFJFwqHhoN/D24yshrhZCRhJc218XzA0EX0cTyBW/HF0IhTs49s4 mrz5GLAW1uzwBCOxxKKwtp5EqvU1YTERiwQ9DjPbUp9Ao2/r9odiz4SN7VRmD6kyqe0N4Vks5O9u 02vw2lLEtVyHOzgxJ7xOZw9zIlLlDrPp18LcRNDdwVFEbQKCMtp7h6PPN9L7R5+kE6SSPh3tpzee R4d77Ua6PgFt6ro/OiNsZ4+kQrGEVMWCdJTdFmZG73eZaPLGA9rM+x7GV1OH+cJ5+RKpyueF/GFq Nf7Qx5uZhgksfCAy9zKTk4rl7xWk+l4uSrnMy7lIgLfUJyCZVldgLJHcE09Kl5UrpKpclk7EvWRi LOBqZclaJcEEKhV4AB4orQTrADyAdVD9foYsQBYgC5AF2CfCXhnOC3BmgnMjnJ3h/gDuUK6uwAPw QLmohHUAHsA6qF7ZQxYgC5AFyELVAcgCZAGyAFmoOQB9AH0AfVBLA+yVoQ+gD6APoA9qDkAfQB9A H9TSAPsD6APoA+gD6IOaA9AH/3YfKBRJYj0jHpcuKj+QqnJROhYz64lmioSg5QnCMsfyQTotf0OK sVS+lU+lDzLHEm7iWIhfLM/uQb5wVr5AqvJZIX+w+zvLc80zLW9lxc+Fr0Wk+lr4LGa3lm/xTLjC dA1NLSRT78SPXySk+vJRfJdKLkwNNTFdMtfW7h4cnxVepd4evM8h1fuDt6lXwuz4oLu9gWvDZLbP 5RuNPl1Obu6k3yBVemczufw0OupzNbJ9Ct9ovzcYjsbnl1ZeINbK0nw8Gh68Z2/iG0mKszp7Bx48 mpx+Ep9FqviT6clHDwZ6nVaOqjOeMufKGGzOHu/A0EgojFihkaEBb4/TZmAaOFeVzPqyBqvd5fb0 e31+pPJ5+z1ul91qYGXWt/qDbeVVAa4ZzmRt75SBZ8RyOjrbrSaOUZDr+gTXI1CsnjPK0DdimU1G Ts9StwaQXbjm3rUy+I5elLbKvTc4cP2nwv7L8D9y+l9+BK6w/7efD+//cwd+AmMED+QKZW5kc3Ry ZWFtCmVuZG9iago0MSAwIG9iago5OTgKZW5kb2JqCjQ2IDAgb2JqCjw8IC9MZW5ndGggNDcgMCBS IC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMTMwIC9IZWlnaHQgNjAgL0Nv bG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQg OCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHtmf9LE2Ecx3dfnt1tz+22c3c7PJlb noqzS5sbwsqGuHID02JDMuYGGinSwLK5HxJWgWMSjRIxh4EZzQWj2Cg0w0X/WrfC3Qz68ZF+uNcP 9+u9n/fzeb583o/BoPM/OoAh5d8jxjAcJ0gSnAMkSeA4hp3Vov6eBBRthpBhLEhhGAjNNAVIVUSr BpwANGRtbbzgEBHjEPg2GwtpQLRKwAmjycI5JKe7S+5GjNzldkoOzmIyErhmAg5MrF1y9/QPeH1+ xPi8A/09bsnOmoBmAkbSFrskK75AMDQejiAlPB4KBnyKLNktNNmsBBxArl0eCIQmojPxJGLiM9GJ UGBAbucgaE4DTlkEtxIIx5ILqUfpVaSkH6UWkrFwQHELFkpTQFvbe3yh2Fwqk13PbyAlv57NpOZi IV9Pu5UmTkuRMHFOT2AikXqSK2ztFJGys1XIPUklJgIeJ2cmTxWQZrvrUjB6P5N7vfu+VEZK6f3u 61zmfjR4yWWHmgLIX7g8dieVLeyWKtUaUqqV0m4hm7ozdvkCD0HTAyjIQzfiD9e39itfjo6RcvSl sr+1/jB+Y0gWmBYFDtkfTjzO75SqRyd1pJwcVUs7+ceJsF92aAoAI3b7I8nVjWK5dlz/iZT6ca1c 3FhNRvzdogWcbkm6AoNB90D3oLEr6XWge6DXwZ/zWV8L+lrQ14K+FvR7onZXJmGjX0im88WD2rf6 D6TUv9UOivl08my/0FDgG59dyW1/+Hz4/QQp3w8/f9jOrcyO+1o7FhIKXd7rd5efb+59rH49RMrX 6se9zefLd697u850bbx7cHR6ae3Fm3flyiekVMrv3rxYW5oeHXS3dK6Eua1TGbk1v/Ls5fbbvX2k 7L3dfvlsZf7WiNLZpuUHBM119A2HZxbT2Xzh1SZSXhXy2fTiTHi4r4MzNTMUnGZFeTA4FV9Yzqxl nyIlu5ZZXohPBQdlkdVSHNzI8M4+/+jN6cS9xaUHSFlavJeYvjnq73PyjLGZZGHAZHW4PENXxyKT t6MxpERvT0bGrg55XA6rGmn+OZcMBowwQk7s7FW8w1dGrgWRcm3kyrBX6e0UOUgRp8eCwYCrubZN kFxyr+eigpiLnl7ZJQk2NdtuWqCagAPKzHK8KHU4kdMhiTzHQqolVlYnA1OfF2gzw1ptHHJsVpYx 00ZSy7V/V0PjhQUAI0WfA5QRqI8LfwloqFCfl/BzQv3V73HrH92BpgO/AE1NJ+AKZW5kc3RyZWFt CmVuZG9iago0NyAwIG9iago5MjYKZW5kb2JqCjM0IDAgb2JqCjw8IC9MZW5ndGggMzUgMCBSIC9U eXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMzkgL0hlaWdodCA3MCAvQ29sb3JT cGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9G aWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2W70sacRzHvV96+vUuLz0Pb91yXa4Vt8p0 g6smkZsKNQQl1rCEBnMUQltpDwqsIFH6wZKKpKAZmQNpKIXlUOhf213DHwv2fIxeD+7R+/v5/uA+ n/dbofgngCDo7+eAIBhGUBSrgaIIDN9fIGlQTIVrANBqCYLQagHQ4CoMlZTNlWEEwwGpazXQRkbG SBtadSTAMaRZByNKNUEZWc7cwXfK8B1mjjVShFqJwI1yMKYm9azZ0tNrtdllbNbeHouZ1ZNqrFEO QnFCz/KCTXQ4XW6Px+N2OR2iTeBZPYGj9dPBGKBMfK/oHPNNBoIygUnfmFPs5U0UwOq7wiqCNgui 2x8Mhb9EotFo5Es4FPS7RcFME6qGDG8xWWxO/0x4KbaRSCaTiY3YUnjG77RZTC04UrsDoqa4bnFs Orwc39k7TKfTh3s78eXw9JjYzVEatCZDNfr25w7fx6X47tFpNpfLZU+PduNLH32O5+160JABw5P+ 0Xfh2M5RNl8oFouFfPZoJxZ+N9r/xACwejVA8wNvAp839jL5y+tyuXx9mc/sbXwOvBngaW2TzMjb 3dOLicNs4bpSrVYr14XsYWJx2m3njQ0ZpmU67Z5gNJnOFcvV29vbarmYSyejQY+9kyGw2vs+yB4e 5OEP+d2CD73w//UCCuRpGYwk0ufFm7sxeFM8TyciwT+npSyzuaYW4gdnP0o/K5XKz9KPs4P4wpTL 1jxUUUB3WF+/n19PnXwvXJVKpavC95PU+vz719YOunmSG8x9IxOzK5sH33L5i4uLfO7bwebK7MRI n7lp4COaVk4Y9s4srG3tH59kMpmT4/2ttYUZ77DAtTZcBsGpR10v3ZOfIrHE9tdUKvV1OxGLfJp0 v+x6RKnrngXjJMP3Od4GQvPRldjq6mpsJTofCrx19PEM2bA2WAn0XJd9ZHxi6kNodm5ubjb0YWpi fMTexemBsm6UkOThxsfPrIOjnnGvT8Y77hkdtD57bJRdvOZZEKIEOoazCNYX4tArmSHxhVWwcIwO KJGaySgUMIoDHc2280+7ewSZnu6nfDtL6wCO1ospFBCMqTQkZWBMbBsn08aaGANFalRNwUHaG5JC jZRpCFJH/UZHElKukWJNY0v5iHJCwjClCq+hUmJSpLmnuruMnKaauJ+j7jT/4ucXbcyBcAplbmRz dHJlYW0KZW5kb2JqCjM1IDAgb2JqCjg3OAplbmRvYmoKNDQgMCBvYmoKPDwgL0xlbmd0aCA0NSAw IFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAzOSAvSGVpZ2h0IDcwIC9D b2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50 IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7ZbvSxpxHMe9X3r69S4vPQ9v3XJd rhW3ynSDqyaRmwo1BCXWsIQGcxRCW2kPCqwgUfrBkoqkoBmZA2koheVQ6F/bXcMfC/Z8jF4P7tH7 +/n+4D6f91uh+CeAIOjv54AgGEZQFKuBoggM318gaVBMhWsA0GoJgtBqAdDgKgyVlM2VYQTDAalr NdBGRsZIG1p1JMAxpFkHI0o1QRlZztzBd8rwHWaONVKEWonAjXIwpib1rNnS02u12WVs1t4ei5nV k2qsUQ5CcULP8oJNdDhdbo/H43Y5HaJN4Fk9gaP108EYoEx8r+gc800GgjKBSd+YU+zlTRTA6rvC KoI2C6LbHwyFv0Si0WjkSzgU9LtFwUwTqoYMbzFZbE7/THgptpFIJpOJjdhSeMbvtFlMLThSuwOi prhucWw6vBzf2TtMp9OHezvx5fD0mNjNURq0JkM1+vbnDt/Hpfju0Wk2l8tlT49240sffY7n7XrQ kAHDk/7Rd+HYzlE2XygWi4V89mgnFn432v/EALB6NUDzA28Cnzf2MvnL63K5fH2Zz+xtfA68GeBp bZPMyNvd04uJw2zhulKtVivXhexhYnHabeeNDRmmZTrtnmA0mc4Vy9Xb29tquZhLJ6NBj72TIbDa +z7IHh7k4Q/53YIPvfD/9QIK5GkZjCTS58WbuzF4UzxPJyLBP6elLLO5phbiB2c/Sj8rlcrP0o+z g/jClMvWPFRRQHdYX7+fX0+dfC9clUqlq8L3k9T6/PvX1g66eZIbzH0jE7MrmwffcvmLi4t87tvB 5srsxEifuWngI5pWThj2ziysbe0fn2QymZPj/a21hRnvsMC1NlwGwalHXS/dk58iscT211Qq9XU7 EYt8mnS/7HpEqeueBeMkw/c53gZC89GV2OrqamwlOh8KvHX08QzZsDZYCfRcl31kfGLqQ2h2bm5u NvRhamJ8xN7F6YGybpSQ5OHGx8+sg6Oeca9PxjvuGR20PntslF285lkQogQ6hrMI1hfi0CuZIfGF VbBwjA4okZrJKBQwigMdzbbzT7t7BJme7qd8O0vrAI7WiykUEIypNCRlYExsGyfTxpoYA0VqVE3B QdobkkKNlGkIUkf9RkcSUq6RYk1jS/mIckLCMKUKr6FSYlKkuae6u4ycppq4n6PuNP/i5xdtzIFw CmVuZHN0cmVhbQplbmRvYmoKNDUgMCBvYmoKODc4CmVuZG9iago1MCAwIG9iago8PCAvTGVuZ3Ro IDUxIDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+ PgpzdHJlYW0KeAGdlndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRU wAFHhyJjRRQLg4Ji1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGA NKFYFO7rwVwSE8vE9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3 QyQGAApF1TY8fiYX5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0 noy7UN6aJeGjjAShXJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTE ObxyDov5OWieAHimZ+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQEl WW2ZaJHtrRzt7VnW5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0G QOXhrE/vIADyBQC03pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4Ej SRUzZUXlpqemS0TMzAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V 4X8YNicHGX6daxRodV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtc im7hTEEiU+b2DI9kciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlA BLJBPtgACkEx2AF2g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBak D5lC1hAbWgh5Q0FQOBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALT YQ3YALaA2bA7HAhHwsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgk AREha5EipAKpRZqQDqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5 gqVi1bGmWCesP3YJNhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN 4SbxeLwq3hTvgg/Bc/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahP dCKGEHnEXGIpsY7YQbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8l D5I/UJQoJhRPShxFQtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xr l3slT5TXl3eXXy6fJ18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8 koGStxJPqUDpsNIlpSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPK UgbCMGD4M1IZpYyTjLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP 1DBqJmphatlq+9Uuq43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpu msma5ZrnNMe0aFoLtQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIu WzdBt1y3U3dCT0svWC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eq o1qjO8Y4Y7ZxivE+41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzI fKN5m/krCz2LWIudFt0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3f dr/tfTuaXbDdFrtOu8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+d Wc4pzg3OowsMF/AX1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysP Sw+RR4vHlKeT5xrPC16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX +08EOASsCegKpARGBFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm 7Hm4VXh+eHcELWJFREPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYf GxV7JHZyqffS3UuH4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXfl BNeTu4f7kufGK+eN8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGp zWmEtPi000IlYYqwK10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy 3mdHZZ/KUcwR5vTkmuRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20g bUjZ8MtGy41lG99uit7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK 4k8l3JLr31l9V/ndzPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3Fg D2mPZI+0MqiyvUqvakfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFt xWHc4azDz+ui6rq/Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQ M6O5+AQ4ITnx4sf4H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/98 9Iz2mZqzymdLz5HOFZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZer Z645XTt9nX297Yb9jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvru Lr57/17cPel93v3RB6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy// lfmvT8MFz6nPK0a0RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K 3qi+OfrW9m3nZOjk03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/sK ZW5kc3RyZWFtCmVuZG9iago1MSAwIG9iagoyNjEyCmVuZG9iagozMSAwIG9iagpbIC9JQ0NCYXNl ZCA1MCAwIFIgXQplbmRvYmoKNTIgMCBvYmoKPDwgL0xlbmd0aCA1MyAwIFIgL04gMSAvQWx0ZXJu YXRlIC9EZXZpY2VHcmF5IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AYVVXWgcVRQ+ u3NnAxIHH7QNLbSDP20J6TKJVhOLtdtNukkTt+tmU5sqynR2NjvNZGacmd0moU+l4JsWBOmroD7G ggi2KjYv9qWlxZJKNQ8KEVqMICh9UvA7M9tkdkEyw5357rnnnnvOd+65l6jrb93z7LRKNOeEfqGc mz45fUrtuk1pUqib8OhG4OVKpQnGjuuY/G9/Ht6lFEvu7Gdb7WNb9uSqGRjQuobmVgNjjiilEWVq hueHRF2XIB88G3qMbwM/OVsp54HXgJXWXEB6qmA6pm8ZasHXF9SS79YsO+nrVuNsY8tnzm6wr/zs RusOZifH8e+FzxdMZ2oSeB/wkqGPMO4Dvtu0ThRjnE574ZFyrJ/ONmanci35yZp/dKolv1BvjDLO EqWXFuuVN4CfAF51ThePt/TXZ91xttNDJPUYQf4U8LPAWt0c4zypwBXfLbM+y8OqOTwC/DLwJSsc qwDDvvRD0JxkObCgxXqe/cRaIntGP1YC3gZ8yLQLvBbsiIoXltjmIPC8Yxd5LcQuLptBFC9iFz+F 9cporC+nQ7/Cc58mkvfUrKNjwOBEHq37oyyHP3Lo2dHeehF4yW+UOfY9wGu6P1IAhs3MY1V9mHl+ AXiATqR0Msml0/ga5NC/iDcgi5oR8sjHWA19mwrQcNB89AxoFYB0WgAqJbRM9FgnnqNSFT2VZqJZ QYTYyv2ob1B+16fUgLRO65DWgV6jXyLJPP1Kc+jnIW1gbKbDbh5eOLQID9gTtvmgZdMV24Umnkc7 KCbEK2JQDJEqXhWHxSExDOmQOBjNib1P+s5+Ptiw9C7WTfq+DA5CrGfDMwescDQBPPgH685Gmgm2 Lu5o7PO8j94/779jGbc++LONvQD6MSe/waILayYl5l4/901PwkN1RXz11p3u6+foeDJLUd6qnVmS 1+T78gq+9+TVpA35Z3kV7722XD3KC/+Tuc0hRjuSzUHOPJtRtHHGG8AhuKlFc/a3WUyy6bZitGDJ QpSdq7j/ywnzwzy3sVJzLu7wvLc/YzbN94oPi3S+T7usrWufaD9qf2gr2sdAv0sfSl9K30pXpKvS DVKla9Ky9J30vfS59DV6X0C6LF3p2Elx7Bu7B37Ge9Zo7TBmhrMUEPPC2swKSx/xdwZjm/kzodVe A527f2Mt5YiyU3lGGVZ2K88pE0qvckA5rGxXBtD6lVFlL0Z2brBkYz3OgIV/kmeLpiOu4jyxV3Ww 58NLHe+mX1zD1oY12Ek9Dp7Z2qYOrxFXvxVVY7w7XZwGOk0hYovOInIfOpwfJ6r+ztlckzg1Um/i lLDELtEvxlo1mBMHUIXjbfU4yFWaGckMZ3KkZnozQ5n+zDHGUazR+ZLZi9EhfEcS3jPLMf+bNcRn GO8d5qgJbKOHWys053HfEeVdb8G3ZuqhOqBpL6k5XK+mOuYY2T5Vt201GgpU3wxMv2lWs8R3N88j +uv16E5ObbthNPxmLKNU6ibRf7ePkzQKZW5kc3RyZWFtCmVuZG9iago1MyAwIG9iagoxMTE2CmVu ZG9iagoyNiAwIG9iagpbIC9JQ0NCYXNlZCA1MiAwIFIgXQplbmRvYmoKNTQgMCBvYmoKPDwgL0xl bmd0aCA1NSAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNv ZGUgPj4Kc3RyZWFtCngBhVVbiBtVGP6TOckKu87T2tUtpEO9dCm7S7YV3aW0mluTtGsastnVFkGz k5NkzOwkzkzSC30qguKLq75JQby9LQiC0nrB1gf7UqlQVnfrIig+tHhBKPRFt/E7k2QmWWqbZc98 8/3f+W/nnxmigbVCva77FaIlwzZzyajy3NFjysA6+ekhGqRRGiyoVj2Szc4SfkIrrv2/Wz+QTzBX J+5s71dvuRsscksl8t0Hvla01CXgE0SBs2rdtIkGhsFPH7frAoschk0kCPyiwOU2ho2GF9v4NUeT z8WgOQssq5VCEXgFeHyxhy/34HYOUMBPkhvc1FRF9CJr1kqazh1De7mHuUd5N7ikN1Cz89uBdciq zh3GdQy1v1IsxAWeBF5RC4k54EeArzW1hUwH367b0RzwY0T+nY3qfAR4N3CqZB6cB4Yfv1lppLr4 nVOV/LPgt4H/xljMHOnsXVOtGHpJO8HfrvC06G+ISFI0O50Hhh/pgFnLCT1ykEpFHk8AjwO/Xq0d FjnAp/SZ1ZwTvMhn7VQlJvIU/OWXCoeywKPAv3I9KfSIJf1bt7OdHFjI0DMiLmKxOLeceuGHhexK PgUecZlum/nOXrZc0g6mO/pPKmZK8GLvtbruzChyC/jNRk7UjliByYKZSALDZyDLjXnRT4GbtOAr EKcaLWJVyaBNUihHSYriWicTlhJppIPhsHIwHHddzYSzz6IqeI2ajs3CmnWU7Z1drUJlsAZdd7Qq xUIfUQOeKvQH2IrrU6EY7hrgyv/jp53LjY6fGhthYbYX//vYLNvPptkMKewp9jQ7wOJgZ9g+13cW e7oViXxuIErbz8uIyB3dAmq/iBptKmD9BYoaWa6Hvq4sjzbGPMsZ8wVNvfLG3z290rCz6iom+jp6 5F49D/wWuB5Yxboe2HB9KIGfAhv4W0dvvFpqnr3TZXFSGk601qfbehZdVQSV6s7OJXRBQ828p+aJ Xh+XTn/5oBdtlZ17/urQpdMlY3nUY0UX+KuZWxk6M+6x4R/Df4ZXw++FPwz/Lr0tfSp9JZ2XPpcu kyJdkC5KX0vfSh9LX7j6u82Qe/YkMhdzJfIW09WtsLfXmFg5Km+XH5bj8g75UXnWVSnyiDwlp+Rd sGx3z82bb6W3cvTlKKJ1+3PnWOJZ0VxPOAPf/ZgAzYvYNwPzyFij4/Bpot9i3gw6CW3vk9epiIXY FEtvme5pMfNd38FEMB6MkBLcHZwJTgUPCdx9loO7YJvBmujNDfPhKvoq5TY/Ib4nFKvVT5pauWIr e8LhJ5UIPn1cSRvq5LhS0HXFMVmKyS1uNnlxksR3U+wjuplzvoe+bVc8zn6GaP9fePd973HHGkQr FtHI4x43hnflA+8SnXtCbZjNtj/y+b4jskp79zj3vqEo3l8/t1o38R4beIto881W65/3W63ND+B/ g+iC/h+gn3xVCmVuZHN0cmVhbQplbmRvYmoKNTUgMCBvYmoKMTA3OQplbmRvYmoKNyAwIG9iagpb IC9JQ0NCYXNlZCA1NCAwIFIgXQplbmRvYmoKMyAwIG9iago8PCAvVHlwZSAvUGFnZXMgL01lZGlh Qm94IFswIDAgNjEyIDc5Ml0gL0NvdW50IDEgL0tpZHMgWyAyIDAgUiBdID4+CmVuZG9iago1NiAw IG9iago8PCAvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIgL1ZlcnNpb24gLzEuNCA+PgplbmRv YmoKMjggMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAv S0ZXSEFGK0hlbHZldGljYSAvRm9udERlc2NyaXB0b3IKNTcgMCBSIC9FbmNvZGluZyAvTWFjUm9t YW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAyMjIgL1dpZHRocyBbIDI3OAowIDAg MCAwIDAgMCAwIDMzMyAzMzMgMCAwIDAgMCAyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwCjAgNzIyIDAgMCAwIDAgMjc4IDAgMCAwIDAgMCAwIDAgMCAwIDAgNjExIDAg NjY3IDAgMCAwIDAgMCAwIDAgMCAwIDAgNTU2IDU1Ngo1MDAgNTU2IDU1NiAyNzggNTU2IDU1NiAy MjIgMjIyIDAgMjIyIDgzMyA1NTYgNTU2IDU1NiAwIDMzMyA1MDAgMjc4IDU1NiA1MDAKNzIyIDAg NTAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNTAwIF0gPj4KZW5kb2JqCjU3IDAgb2Jq Cjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0tGV0hBRitIZWx2ZXRpY2EgL0Zs YWdzIDMyIC9Gb250QkJveCBbLTk1MSAtNDgxIDE0NDUgMTEyMl0KL0l0YWxpY0FuZ2xlIDAgL0Fz Y2VudCA3NzAgL0Rlc2NlbnQgLTIzMCAvQ2FwSGVpZ2h0IDcxNyAvU3RlbVYgMCAvWEhlaWdodAo2 MzcgL01heFdpZHRoIDE1MDAgL0ZvbnRGaWxlMiA1OCAwIFIgPj4KZW5kb2JqCjU4IDAgb2JqCjw8 IC9MZW5ndGggNTkgMCBSIC9MZW5ndGgxIDEyNTM2IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ad17eXhURbZ41d17Saf3vdPd6XR3OktnI5sJ5BKysSQGgpAgwQQIBIQRMERR4UWBAaKi yCr4VFwgwGiakIEGBh/DQwHHN4ILKKOOPtFxfObTNw91FNL9O3U7iSGzfPzhN3/87s2pqlNVt+6p U6dOnXP6pm3Z8hYUhzoQjWpnNC+Zh6Qr2IYQtWbO4uYlMVw3CiG8bU57myuGs8kI0YvmLZm/OIYL WxCSO+YvWjHwvEGNkPmD1pbmubF2dB3yvFaoiOEYxkNJrYvb7o3h2l7IOxbdNWegXf8G4KWLm+8d eD/6AHDXL5oXt8T6B2shT1py191tMTz9K8jnLlnWMtAf1wN9byIMtS70BJKhOxGPKKSGuxEh/gu5 AzHQStrhuktUPn1HfPG3SCNI+B3Vj0n526vPtP615bpfsUn4ASpkg/1JzgUiAYSUGNr7FJuGWqTn IHGFUV1qGI0HKAHIBUhNHWtGHXgPehzgWQAaLcAPoxUAGwCeBGCGSvsAO4of7mEE8Rhegax4gqhg nFP1FqdZrnC+FcZc79PO982fHscWWL1PsKUnDsnGyvGz+Bk0Fznxi8iL70NVKBnvPBRY5GyCpn1o CUAHAC2lGO/rSch2voLTkJfB8IwPJTD4sPNPWenOz7LCFO5xnvKHGch+mwCYGO886Xja+R+O+c5X AA7EmvYHoMdh5z7HIufmhDDe2eN8whHG8MymWLbcAY8edi4ObHPOzZLaJ20LUwd6nIXQPk1UOPMK 3M5cxxVnhj8sYMDTHZOcKVn/5UyCB6GbCwb1ihqn3bHZeQs0JTjK/bcAHMf78S6Ugnf1eCc4j0ER pntofKBgWxjff6gqOcsbxveJeVXJ2wJVfm9gktMbqPD7oTztLL+Gv50fy2fzqXwy7+PdvI3XC1pB LagEpSAXBIEP41/1lDi54/gAKgG2HDgkcAIbxi9DJXMcvyRVvnREYARKQII+HP0YhBcjfRgf6AWx xwgKhzmpxIXxS4diVS+JToaUGKlBTZEyJJAiCgsUmoBC+NEwh9Ya20vMJdoxmsKKsn+UNEktg2nq P77M2BHaNrGuPrTf0RDKJoWoo2Gwu3mw8A/ztuXQ1FKamjpxyopD7UsWzitv8ZQ3ecpbAJpCD7e3 mkMds12ugwuXkAZXiPY1zZ7TSvLmltAST0tZaKGnzHWwXXpuRPM80tzuKTuI5pVPrT84T2wp62kX 28s9zWUNh2aXLmu84V0bht61rPTvvKuUDLaMvGu29NyIdzWS5tnkXY3kXY3kXbPF2dK7yOTLF9SV 3t0G0ukqXzDRFUquC42fPKM+5GpuKAvjPVBZthyxJ5GaPYGS2Q5kZTKQE6Ho+wCXSR65Lfo5ewap I4uj/0sXwaIeJUBFSorRSfQo2oW6EYe6oJyMZqEd6BxeCHt7JupFF3ECCoLuZVAYTUJv4Gj0ApqH XoD+begU2ooOIiU8sxgZoHUj9kbvA1yE8my0JvocSkIF6JfoBCqEUTeivui+6CFonYJuQ/vRAXj+ d9hDHWR00ZejV5CAJsOYa6DlQnRStBtpURoqRbVQuwa9gr305WgrMqMioO4p9AzajX6LvsIP4d5o a7Q9ej76CYiqGdlRHdwrcS/+hO5mfhl9KvplNAKcSEYp8NYmtBk9D+N3w30SVGs5vhO34c14KyVS D1G9zFrWFOkHPgRQJdxV6C60HjhwFJ1Gf0E/4K8pM62m2+hXo7nR/0MKNBFmSWbSgtrhXgf3RpjT cczhTDwO1+KVeAveit+mUqjbqHrqHupe6nO6hp5Jr6DfZu5methH2B2cIvJt9Hj0TPRdZEIOdDta hlbB7E6h8+gq+hHTMJYde3ERLsWz4O7Au6ijeDc+StXik/g8tR//EX+Kv8bXKJZSUgYqlWqjNlMH qFPU7+kF9Fb6SfqP9LfMGJZid7OfcV7+D5HZkQ2R30eLop9E/woqVkBuWJlSVIPuQM0w2yVoFPo3 mMVLcHfDqp1Gr6Jz0v0ptqM+9FfgAsJabMXZuBruGnwrnocX4KfxMbhfkWj5joKFoGSUhjJRdqqO mk0tpjqod6kO2kan0BPoGXQ33Gfpi/Q1+hrDMjrGwFQy49EjzGJmJ9x7mC6mh3mTLWTHsDXsNLaD 3cA+Qs9hL7AXuVXcRq6H+5r7BtTiJP4u/hFYnXMgs78FWf7pYnASUJ+NfoHm4DI8G22D1diNm1En SNdcvB74tQQlRxvpVXQllQnS8Aq6H6R1J1qJNtAz0e7oe/R+dAkkZREM2YH2MqXIwW6H1XkIZYIU DdxiICWQ7Pd5kzyJbheofLvNajGbjAa9TqtRxykVcpnAcyxDUxillXsqmlwhX1OI8XmqqtIJ7mmG iuZhFU2wlV2hihv7hFzkuWZouqGnCD3njegpxnqKQz2x2lWMitPTXOUeV+i/yjyuMJ4xuR7Kj5Z5 GlyhPqlcLZUfl8pxUHa74QFXubm1zBXCTa7yUEV7a2d5U1l6Gj4qAjvk6WlEcYhIQQYOoXHNK0HB onGkR3nI6ikrD1k8UIY22lvePDdUO7m+vMzmdjdAHVRNqYd3pKctCAGd6GHlXM/ch8Mimt1ESs0z 60N0c0OIaiJjaVJDJk9ZyHTfZ+af0MFS+SPDGkOUt6K5pbMiJDY9DMwlaBPBmh8BbGKdC4al1jbU h/DaASIIjQuBUkJu7EzwNi10hWSeUk9r58ImYC6aUt9jFa2S8g2h2voei2iRkPS0o+ZVRW6Y/dH0 seljSV7kNq+K5X9aHat/6yTJzatOfwz5xClDDMCEA57xQGfINUd6iQeILSBJSwHqnFMAfIKrAcM0 FwA940IUyAztDbHe8c2hjrpBMlrLYsQ1LSzrkVms0iFU2gD9mzrVt8BKQX+1x9X5LZzWTZ6+r26s aR6o4bzqbxFpJAs9JCsh3DxYbieHpRdm3Wr2tJL1bZfWFHCPuXxYBeCENYTmkB4O8Np6d8jVABVg TaZNDCNZbf1BjDc2hHF0bRiVOY6CjUrfMQua04ioLSiD9wOSngYVKW4oBdNcFfDmCiIrrk5X5/i5 na4KVysIE+OVcmho6WzIAA7W1QOf0FR4o9hgGyq2NDTcAuNkkHHgEeje2QAjLBwYAXKpKqMfOmWm wWFK+2rrJ9eHOspsIbGsAVYBxPdkbX3oJEhuQwP0yhqiFCheucA8QHM20JyVAu05sVHAdumAIRo6 O8mYdfUed+hkZ6etk+y3GB7GaGSFOFARRqQLYXkYd9TCs5B53DZpDdweN5DVQHg6CkR6UKLAZv/n HM4bohuezAdq8yQOF/xMHC68GQ7fclMcLhqi9AYOFwPNRYTDo/91HB5zA4dL/jmHxSG6gcixQK0o cbj0Z+LwuJvhcNlNcbh8iNIbOFwBNJcTDlf+6zhcdQOHx/9zDk8YohuInAjUTpA4POln4nD1zXC4 5qY4fOsQpTdwuBZovpVwePK/jsNTbuBw3T/n8NQhuoHI24DaqRKHp/1MHJ5+MxyuvykONwxRegOH ZwDNDYTDtw9xWLSF0HA93DFC7aKfXTHPHMZysJRYLSqlCsFx3o82ApRBuRv8rxchP8d8itzsNDSK uRtNAWgHp7sI8gKAKmi3Qz4aYA0+QyB6GfIN3H60htQBkL7tMOYGeI68wwR4B5QVML4WcgOAHUgY jB0pEYfXA+5C/0Fc+RsuCryAwQseu+mLHerJDZWGF3hAYoGq4bWkLENy8J2UEBFSoXiIdWnAz0NI h/TgQRrBC4KgHLIgK7LBHByAJQD8/3GBPy5deSgPvLyT6GPw6maAP/I5FaKt9FOMwLzFJrCvcUau DDydZ3k7fy//jTBb6JKtl70nz5afVbQrlcpfwBgU+GyIOQ++Pg0xw3GxOJ6QEUYMgKAOI3QegOBQ pj+AMuQ85DTksg/QMXgKoWmpx2AkFvLMrByNW+MHKGU2hq//N3vix3FhpvoaxIVAYjZGZlHN7Luw QmNEmV4j0xlNJqvsOH4KVliPnxJVIojfJLXFYPzevWiKOcxnr01Nrbla3Wf90Nr3Tl9NeUvZ56ik JCsTUzynUZuMOk8Q+31+X646P09Hzfr3jMrJ2ZtXPFERKDAqGouOs+9G3nz8D5FPIh99syXy5ZVV i7Z0Tb8VJ/9pM/ZK9JQBPSagR4fyRKWgQToD0MNMitcRkkDAgCSZYNEbvneX3A8BJELJO30fDqND p83P06j9PjonAZsSsEHNc3TlM8EKQsXOsb7MwKyiY5FZOG/jJezG7m+2YON3d7esvLo08t4XWyMf STR0A2M60GXgv0/U4RRazgINeC6yMOxc95yW2Gv7B6Ze3ZeVmZ9j8HRfuHAZgjFk/V4EDTEH1i8O pH2+6Fyn2aalsgVFQjyFEkyCkKWzWuO8KovFetHdvmFwNPV31X2opL+kPytz3ArRh40ar8HH8SzP 8DRP8SwnVwvZGBshkWkV2ZjXgxecmopTU1NSUx9s9Gbn55E7V0153Bra7TIZNXqeCmDqfMvYtglF 1vj3/zfyzFmqDmfs3Vq/K/LL/u79Bv9dDQ/XVWINDl7bweounYpc+PJEpEfiwTngwROSDJpI5PiY pFyCqRAnIqJHZWRm6XI0nnPnzhFxgkY3yCyUQfZGiVbMJSCeYgQZ8A1do2gvy1zjLMIjs8ypNeqr 1VeL+4uvDkpOcXV/MUiPwa3xaNy5zLmI5vWIhj3R/eNfWBUsBJFRiNWzeTA2hx4Tyx7Hz2JKxFMx ZcT4XvZzTM1nWtn1DG1JprxammaQV8txLGYpmqMRxTKCQCSIop9mEX6as/AbgQoLkGGu7i8shD+L RIkZlRSXmIq1hXhddTB1XdBMYo6iEoOLT0NwGlMcu05YqT4tJUBvI2pcunSZjMrBHozVeA/e/cf+ L97u/zN74pqD+fTHcUAuXDSaEv1AioDEQ2yrGH0oFqRkYrlaYVPa/TlV6gWyhWq+UNAqZbQtm0+S OdRKR1EqFQwUHSmiirJTvFo1zwp2f6LJHsadosfkcPJ+R1BBOXIVxXxxsV3PB1K6kqxjbAH7hHh/ gWX0mN/g7bAYR/E2NLA9rvbVgGxd6T+tLcyAndpH7j5toUZrKmzUaAuDfcE+DLnGVChJXnJeviER YYsX58W7kTnB5kZGlx62SiLKp9zI6jC5YbEgAalIxepiEr988MEHUSNuTDLmgBSOxiocjzmeM2Ai j6N8nkSe4z1jcE42hFA0eugEr1BhTyKoCZL5ckfl5euwalnNHQ3b3K3Zi2dn1eHeMQbl6vseLXLL u9jvnz/RvtzkVSZoUtJ8jSlGWf7vH9h64tj2zjdnpI3fs8lg51Rx9oz5eJGQZk6fWTcppe61XVVV O/q32xNpeq2SK/WIVQt/vX7rCzp8hezP9uhHjJc9BadTAloiBvfwe+2X7HSiEJ9AwdFncrC8Rp7g UCj0fsHqsgbVQRxAGovTtc59olFiKsjslSuEq7Bj+whLNYWaGPfMWiMnN3J6H9bKITHwJh/WyRJ8 sZ1K2ATbhrBCq9FTEgcMnqQYkziD3mTMae8ueqHp7A/fXb5vanbhHmrepk2P3n/UV3mKPdX/P9WT I32Rq5FIqMhTvWHlF6/s++jwhe2zDoKcUQiifvR5pkY6W/eKGXsteIe5S9hvpicIml16mtZzDisf 59ArbLzNZlL7tZj2UxqrQ+43WezwUwh/yL1s5YDEwMyKq/sKC0FKBiQGCmrQc6CYRiGL4FUa5D6k 0qlhlpp4NW8BjEW0G2OKoRXGOB+K10IiM3M+zGDODTpKEhUiLOpiSWQkeUFGExwWRDwMManIIeJA 5apRDk9d/NTUrV626lcTMtc/sWS1pTvhm+Nv/Yi179iZmtClOau7Fj+7+4MN97z7Ks75HEKWt7DA g4LoZboP1lWBHOgeMTtfVamartrL7LOxXkFPxTvUSHA4eJ2ccpgUbFAXVAc0WqtT4bdaEpzr3MtK h08fFnjk2lrNdpkcYWxWwNzskCAL5UNym+CDCcKftAu0RLwloecMyGQ0aUBL5pJpodxR2pzvnti9 cvee+9bvw511maNfeq7kV3cdivz49Uf4ji8unfvdf55/ncoflTCRcvw4Zuucepz+45d4OuiQquhl xgpRVDtE3L1YKa7YLjxp3eukWRUVz+oNKm28QS8qRb0QsOKJisP0Gfwafcb2nvC+7KLzPc8Xpi88 ijOaM1pqpsC6k+J3Gh1JhRzPG90OOy93GBVefrt9r/0I7AHGa4z32lmLXMlrVP54h5+1+pOCvN9i 8fnfce+JCT/IviT67/QXagtBjRRCltEY0yxQAt2u7oNaSVoqkIdhaQhRY5bhnD6NWqvWqfVqhlN6 E21JPrBaHT6c4JCZeB9SGFQ+HKfyWN1QxUIimEGu4tSQEFUT0zWS8KSkpjyIlzaipY2NIEJwG9wJ sKXg+AMBAl3DAbc1IEQYzBBPIsdjqvdiQZ5Wff1r9vHtj07N1B/kb82asmLslLORL7H5v7FTkTzh pQe6WOxhKu+8bfKiCc89/2pjXmXRpmCtXQ36nYNToDTiW17x0KFOTH4IhjMJbHCwU94Cm7ZaTOUd nNxB43h9oTGO08otcOCo4jQBk5bXxqucKkp1XW8xW66756+KiVh/Y+FpiVHDD8ESMGSyMsF6yck2 mgxkX3AGsCvgWPTk5uT+2lPSq0ky2S2KKa6e3p6tW9nSUTMp6gUK3/byxutz6ac2dknnzehIEf0F yIoTpcMvO0fE6jz9eGG8rF5okK1X7rN1Ofb596QetSlEgTYmBlSn5YlwpDBcwGGRax3y+CAfDLJ2 OmgMpgdYa6ZS5Y8b4/PbLRmZwzbI1b5CIgH9V76FdR48U0r6pGWPrXuaJ9maoNAkedU+T4LPh5Kt kGgUKjeKVynjvI5EH/bbAqAnlFowHH7SDlCSdhHZObk5YMBw7kSfPweWmCyvdFokkZVF0qEiaQ04 YjD1wKyc3D3FSyLnXvpKdSTOP3r1m6KPztux8uXINcwfw2Uv/NsrFd7ND5y6NS1ygSkd4xm37nr2 G+2Xd71Y5S9+YtqHU2q/xw4ch4OR3Sd77tj56xPdc9ZQ6dI6r4FDnOgUI6oT02DXCCbeJPgZv245 v1wQdHGUzoCQxsHxBqU8LiC3mrEhgIwWkxl+IT/knh3TKcTGGTguiqXTohCTDSIdBnBGxg5Gj2aU JK4GjWdNr5gz/aE/16UfTchat+RwLyj/Dya7C59veLp/MvV8e379zov9Z4kcUvDrGcJFYGwQXyFP tPOfMSCcHC0nphfIbYCnQWHL9v9Eyen+4tNDYldCrFdiyGlA0tYcgYtJuXaRPUG+fqCilyO1uEAa W0OMvjqwAonoT4NvCTDxOc7HfA/ZebAKVdBBk3EM6CC+R2YWBqHFY3Au6D9YRTjk/bigtzfy3Iqs Xl9JKM7hZPrO/zCK8cxkDl/LX37LbEpyVTHaAG8YLb0zIAJnB2xvKoBosL6HTQMYOuR6kAls6O2V LFFCIPCE8zKVyIfWikW8wKu4eJNgUpni/YIf1FqVZZpivkLp8cqtDo9FTjEmr9thcsRxPOJsdi+t kycD8zQB+EEd91gD5DsCEfR+0AsCa/Enh3Hc8IW9or7ad3XQGTAVl5TA0Qn6z1RIjKrBVTYMrLJp 0AqCxSaqCdZ62Kr3iKMalnbUpCUVP9fyXk3K8TurFz55xBpYMm9vL5Ox49ak0SVJFdPqnpq6sT+f +uLO2o17+jdRxxdnT3z6TSINkizQfbD3iYc9S8w6wp3hKIbTc359O9fGs3olpTerwbpBnFkht/JW K1IGZFY7DpoDFmSxgYl5g8jG1Hxsh8O8+jSFg2KLwYoxDJsKkVvQuyoM88FrDkza33qlNu2II3OV GJhQkG7rxXuB/llTnpn+HJHf2cVz44yluUsX9L8JxILEFEXfZ9xguyil6MDjYs4OYZv6SeOLTJew R73PGBbOCpeYz1R/1itvETiHmVc6tAoLb7EYKH+81SbzGyxWWxjLwIIZOKEki/cn60U6itIglOJT 6GRwmmgoH+ZNUGLjoCTXK30gz5AIRjBYaBUk0nlDklQwVJK0uQM7E6wULZwslBtOc8lI+Xht5qRj L27b9jz8kH498v2HketY+yeuDcfv2TZry/WeA1foy5GvwGTrj7yMU6+DYSwSO6U9chvjhamrUCJq E9P2CXtNVLLgsmtUnMPAx3Mqh12RqKL8ZmuSHKxPdyAx3uJJ+rvWp2R+aiQ5A+PMbrQh1upjfMgG E2ONkGCLyodokzQnaVrEBiUWZ2zNJJsT58TkE37cJFsVzHKNh3ptr7fi2PFyL6SRYHeeePv9hyNH 2naumJJZ1Lvi7bc6Zh48PnfnA9P30Ac3jk8ujvwZ5vjctjtyE8b3f0j2IOxj6gnYgxp0q+jz0764 fLqSYVSCmlLJNDKlXyBiqJELVh0mdhiyaHVhXA4bK3ZEEgu7Rk0iC9Ulp/tPEyuD7KeYzpREb+iM hL1/wPDCnazZobap1z8BW+Vo3i6KfoWmupf17yD7ojR6iT7MTITzMAMHxccKZDvYbdon9TsMO1K4 5CSvP89d4a5MqvRPS5run5c037dCuSJuhard05bU5m3z7UnoStPRYJ6w6UxQh6wGm8luNqTrg8nx igWCz5vnpbyJcXImVWd+ze7Q8YwjuDNVkcHLVGqKRxnuDKvTbDT7TWOSfbw/2ZqlcvrVY5A/aMnM 6hmyqUCFxM7UQjWUyHQLMyCFLUcMK+KxEZWyVJLkSTid8hm8Vp9b5XQjGXxChOk08PnYFCg5tFBn 05vd2BWf6EbuRFWc4Je7sc8rk+N0xg3fjUGSoLG7scUIiWRaSUa5lEgiMij44NJBOChm0Pp9GcSc AleNnFa8J2ZaEfFxYmKB6WM6/mvBW9Y1d8do/92PbRjb9oejf7lzHLWf9Y15ct6C8uSae06VLnj/ o6/P8PgIrp2ROX367eVJYI0mpox/cMdvNs5oHZ1dWSNWpFh0joy08i2PnX//WeoHkCVT9GtKxs4A 7TDl13FB+UkVDuMS0csYC000p5JrrKCu4WuKADKoDPG0k6bo60aIroC9NeDRjLC3MoiS7i/uU/df kU4/YmUR32vQL/XlEpOr6/CBAz5DVlyC3jnOv2rGpk3sjMi7m/vLC3QKTG2UCQ/Op17dLJ3BHdFP 6Y9gP5uAwlniLWH9WT0l0wl6i86iT+buoS+B2YBYlRxxcXIWdJeZN5vBTQrKA0qF1YoDhNi3Bk/o aqK8iPjD8sdsq5JiIhBE9HEjjhEKRg9xLPIlWxdWRePFBdbM1b8p8/bupzyj5m/+rC4ddzMZ/YVT RjV1zfh3SnXtwtOjU6Y+OWUD9Z6V7E8FKN4vmQyIHlNisBS/iik0H7VSrfR8bh2znt2LuigBvpKh ypkJ7C+ZDewZ5iwrjE++O5kXJFUrmbIQIglHl/SCce9iwnj1EZperKUwBd+qrRYTOG4xBH8xyzE0 HojGwDcTchKNobupY5hYLmsO4W7OYqkhwZiPP+4fGYqBaWsLeYjHqGuuVPOxLHXi5BWilwpIoZ7A sFDP4ODgg3ZDqGdo3L8X5GF5dSr8QRwH3IjGpToZJnGcD3ACTn01suhkZDmTcX0H3XrtAnAIkxg2 uxtKSuwSV1Uy+2Ww/LiCH69YR3cKa+WvU6fp1/hzwmvycwrFPH6h0CJfoGjnVwjt8hWKtXynQk76 UpX0Pehelp6ebEwGb5EpwkXMY/gxhpMxmFZQNMspWcQJcgXNy1XAI4j47RJo5rSckp1WILxLaYkj PB8euRoRvwLjAwJYENUhHFKywBsevnbSKpUKdp06Ff5guXpl8O2KPIwfFnVacNd5jmFJR46XCTI5 rOzDokrLgBOvhGlLj8bCYeqVp80sCYpBCOxVqbAOYmFDNSQetnTpUnDIbFSOjfBSAey89PsLr7/1 h97IueOX3z4e+R2wtJeedP0oXXntAj36+n8CQ0E3GyLjJX+F/C7wuviLTsN6814zzXMmrkBbpa3X zufvoe/hH9HvQNvZHYbtxu2mLtRlVFehiYZK0zkDU8a+xlLr2D1oD97LdpnYpGTWbDAZwQY2KBXx DkFFDAWjDRhKZMJkMHcrHzOCvfBOzBkD0au+Yr6BkbFtB8HBbEuGuaS4GGKChZgEA7UG+BHDuFhr MplZjIlwm9eBTAJrSCZADlzIylxKYoM4h6MpnpKUYi5xTvPyx+B84AxNu8/4Vs8ufarjKV8gISNF nZ2hZseoIm1vYCdmMuZHNkW+ejkyr5cTXojj3GZhSxJTA6L4ELGTwOek75V8Thv4d81inu0zC/rJ 93SA8+nUyN0wV1tCwOz8GxfU5X7LPX8gyjGkEi+Cwz5gShfDbEEvEke0pA//Y1/Um5tj4EH9/I1P Sul64fpbz9T5xhtnrl2UdCUk8MViC3xX9/cuF1TCUQuWoAb54QvBfPiCrQyVowrpi73x8JEq+S6v Gt0qfTk4Bb4GvA1NQ9NRPWpAM9BM+N2FXGTHYqnEwW9QaGLF9KqxFalVLYvaW9oWzGmWekjNkKwH 2ALwAgB8RgtfxSH0DsAVgKswFAOgB0gCGAVQBjAVYC5AG8AagC0ALwD0ApwGeAfgCsBVEHAGQA+Q BDAKoAxgKsBcgLbowAXvQkNljFwj8OQReGAEHhyBwztuGA+M7BtweP8N+LQROOHQcHpmj8DnjMBh Ljf0l9Z22HzmjWifPwJvHYEvGIEvHIGTb/eG0yf9D8Cw95Ff0Ya33zUCXzICXzYCv3sE3jYCXz4C bx+B3zMCX3Ejfk2Szf8H1V6WFgplbmRzdHJlYW0KZW5kb2JqCjU5IDAgb2JqCjgwNTEKZW5kb2Jq CjI3IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL0ZM RkFUTitIZWx2ZXRpY2EtQm9sZCAvRm9udERlc2NyaXB0b3IKNjAgMCBSIC9FbmNvZGluZyAvTWFj Um9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMjEgL1dpZHRocyBbIDI3OAow IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgNzIyIDAgNzIyCjcyMiA2NjcgMCAwIDAgMCAwIDAgMCA4MzMgMCAwIDAgMCA3MjIgMCAw IDAgNjY3IDAgMCAwIDAgMCAwIDAgMCAwIDAgNTU2IDYxMQo1NTYgNjExIDU1NiAwIDYxMSAwIDI3 OCAwIDAgMjc4IDg4OSA2MTEgNjExIDYxMSAwIDM4OSA1NTYgMzMzIDYxMSAwIDAgMCA1NTYKXSA+ PgplbmRvYmoKNjAgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvRkxG QVROK0hlbHZldGljYS1Cb2xkIC9GbGFncyAzMiAvRm9udEJCb3gKWy0xMDE4IC00ODEgMTQzNiAx MTU5XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDc3MCAvRGVzY2VudCAtMjMwIC9DYXBIZWlnaHQK NzIwIC9TdGVtViAwIC9YSGVpZ2h0IDY0NCAvTWF4V2lkdGggMTUwMCAvRm9udEZpbGUyIDYxIDAg UiA+PgplbmRvYmoKNjEgMCBvYmoKPDwgL0xlbmd0aCA2MiAwIFIgL0xlbmd0aDEgMTEyNjAgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBxXoLdFTltfD+znOeycxk3slkZjIzmWQyeZJM MhDIJCQhkAyEhEeCiSSE0EABAWN4CaWABgJWbKsgcK9VsUWs/YdgcZDqz+XSC1VYV0WLVdR6i69i iloUFebMv8+ZkELqcrHWdfU/Z/bZ3/vb397723uf70zviru6QQ0bgIbGOZ3LFoB0ZX8KQKm6lnQu S+T1zyA+3dXX60jkWT8AvWXBsh8sSeRlWK/c+YPFq4f7G6IAKdGe7s75iXq4hjjQgwWJPClG7O5Z 0rsqkdc3IO5ZfEfXcL1hA+YDSzpXDc8P5zHvWNq5pBsxXtmn8JG17I47e6UsZIvtWpat6B5uT1qQ vrNAsNQKa0AOi0EGFGjwRgr5j5Q7gcFasR7hP2qUu+cml38BWpk03GPevA1i4uymk4uunL/mVa6X 12I7udRerMA+XLaQDaAiWP+Wcv1IjVgrXtYotOVEoQmhDmECQjGCL+egLPQc2QH69sshObEzoLS/ YfnbCyQPZfCB9IyQvJBKDfKuTeX2rk2b6rIr5aQeShkCdlIDbglXD7qfskfJhEG3C9H4BKIGS22Y g5C81G2Plc6zXyuNykgo1f6V+2f2KwhfuivsX7gL7a9gu5dLJ9nPVGL9oP0lX5RC9KI7ypBQsv2U +8f235Zm258pHWcf9GLZoP1gJaLD9n2lP7Y/vlkqecwnoUfdUbJ70P4LER22P4LjP7RJqngw0XFj Ai3bLE10xyEJLT0UpZ46bF/izrTPw44kpLS3uxfb29xB+4zKKPEM2sNit8P2Bu8Ze7049aA9lJgo kBi9xC1RXJSY1u8+as9KzJAhtg6l2B3uBrsNx/f/4iG73327vdIXJfufrcvyueu8DwWi5LI0h4iQ UBEtTaAu7/PkVzAJsskc8JCHD9VlI81kx6B9E6Ldh+qySj1R+qOQzn7IW+fdjBBA8CDMjJIZIT+/ k5/Pz+TH8Dl8Np/JO/l0PpXXy3QyjSxJppIpZDIZJ2NklAxk+mj8z6EcUZP0nEZEHCM+GSmtocQ0 PvAJFJFRMAWiHNxj7KswV+gmaIO11d/y6JAKO6pz/nGZ/5HMMRNb5KH65pbIAVtrpEhMxG2tN9T/ b5LdVdi7vmn1oabVF2fVdLtqOlw13QgdkW19PebIhnkOx8GLq8UKR4TO7JjX1SPizu7Iald3deSi q9pxsEnqN6p6lljd5Ko+CLNqZrQcnBXqrh5sCjXVuDqrWw811tRNvWmurSNz1dV8y1w14mB14lyN Ur9Rc00VqxvFuaaKc00V52oMNUpz5eTULGyuAvYYaNnjkMvuBBtTBTaA+JsIb4lYaI5fYl8GRTwW H6LRupEMEd69SvTwf4CHZ2E9WpxX4QCRgwuGSBH8idiID94AAd6C/0ErtQ1+gc8a+Ih8iZbmY5KF bQKwEf4dHokvg2VQgfdHhAUDlMHH8bXxU/GvoQoG4AThSQqxxY9APvTjvRv2EhU1L34QzNAAK9Gy b4Q/wJvxwfhfcfwAvE+0JJ8ZF38bFYzFkiBshQPwLHESF/GR2+LvY7kZaWyDA/FwvA/7XcJW+TAV 1uJs7xE7ySQ5ZDd5hx6Kb4j/BNeWhnUzoQvvJfBj2AV74Wmp1TwmjTXg+NVQj3U/gdPwEXyORjeb VJFV1Ov0X+lPmXHM7vgJpGMmztcBjxAaueImM8l8sow8TZ4h/0m+pEqpTjpIv84sYx5F2mbCFngU noeTcBbehoswBN9AjDBI0wQyjawl/4b9/ocaQ7VT66jt1JvUJbqQfofhmW3sPezROBN/Pf4N0pwO PhiHO306tEA33gtgKdwFP4LNhIedcBD+E6l9F94lCqIh+aSQTCIzyG3kh2Q1PED2kefIeXKBfEA+ RupSKDvlovKpPpxvI7WVepoapI5QQ7SW7qXX0cfod+gvGQPTzhzD+102l+3l0rh6frrwc+HdeG58 R3w3ysWItxuyIRcmEAa5uAQ2oyS3Is/2wj54Cn4DgzAYv0qCcAJeQbreg0twBSWWhreTFJEy0kim I4WLyRLyI7ILKTxADiOVR8lROEfOkat4C2Ch5FQudRvVSa3Gezfsos5K/FHRTjqLzqXr6eb4Z/TT 9EH6c8bDzGGWM2uZAWYX8wibxo5nZ7Nz2GXsg+xh9iX2j+wl9jJn4/q5fdwz3Flexhfzu3iBZCAt DuKBZ+AF1LqH6GWYd8NEshmlOgtOo/YOwe/hKnwNx+BXxAYCLUozM/4oRONbUJrPw2/pu6EcHqB+ Rk2JV9D7aTkpil/BsQpQXiN3yJed5c30uF0ZToc93ZaWarWYTUaDPkWn1SQnqVVKhVzGcyxDUwT8 Na7aDkcksyPCZLrq6nLFvKsTCzpvKOiIOLCo9uY2EYfYrxOrbmoZwpYLRrUMJVqGRloSjaMcynP9 jhqXI3Km2uWIkjnTWzB9X7Wr1REZktJhKb1DSqsx7XRiB0eNuafaESEdjppIbV/PQE1Hda6fHAmh M1Dk+uEIQAiU4sARmNi5Do0rTBRb1ESsruqaiMWFaayjPTWd8yON01tqqlOdztZcf4RM7HLNi4Cr KpKcM9xd7IdG0NPUgnPn+hdGkH7Ypprvmr8tGoJ5HWKqs60lQne2RqgOcQ5tTsTkqo6Y1rxv/kf2 eqpm+w2VEcpT29k9UBsJdWxDpovZDjHXuR1z9c0OHJa6p7UlQu5B4kQiJNoTq0i4CU/HIkdE7qpy 9Qws6kCeQ2PLoDVkrXF1VLdGoKll0BKySJlc/xHz+nFOZMqR3MrcShGPc5rXJ/CHmxLlrx4TsXn9 iT8jrm8a4QsR53ZNRjIjji6cBHmBtJaJj+4yGOgqQ/bh1UpwlQuRnokRClWJ9kRYz+TOyIbmYTI6 e6qHiVtUPSi3WCW/VNWK7TsGNGNRgNhe43IMfAEoWdfQJzeXdA6XcB7NFyBWivIfUaEI6bye7hP9 pwddUo/Z1SOKr08SNeZd5pobCjAv+q1cDDj99VGQN7YcJOQnrVESvycK1bYj6GDoubdjdY6ocAur cTrM+P1Y4HNiCimoxYlqRc1wDDgGJs8fcNQ6elClGI+EsaJ7oDUfGdbcgmyBGS3OSKg1dSTZ3do6 FsfJE8fBLth8oBVHWDQ8AmKpKD+GjfL99biqzMaW6S2RDdWpkVB1KzIdlfhYY0vkGOpvayu2Khih FClet9A8THMh0lzgw/qixCgY1mzAIVoHBsQxm1tczsixgYHUAXHXJfIYIY8uCA0XREFsInI4SjY0 Yl9ELmeqxHKny4lktYo8HYMKfF2BMKz/bg6XjNCNPQNIbYnE4dLvicNlt8Lh4C1xeOwIpTdxeBzS PFbkcPm/jsPjb+LwhO/mcMUI3UhkCKmtkDhc+T1xuOpWODzxljhcPULpTRyuQZqrRQ7X/us4POkm Dtd9N4cnj9CNRE5BaidLHK7/njjccCscDt8Sh6eOUHoTh6chzVNFDjf+6zg8/SYON303h5tH6EYi ZyC1zRKHZ35PHJ51KxyefUscbhmh9CYOtyLNLSKH54xwOJQagRvt8IZRZhe+d8N8200sb/tulreP LASpvh3Jb5dYPvd7YnnHrbC885ZYPm+E0ptY3oU0zxNZPv//I8u7b2A5sCdhNxUEERcjtCHsZWfB E9wB2InpxzGdz9wJ45i/wFrEkxBXIM5HXIX9tiJs422wAfP9YhnCOtoGG7FNFXUADGIe0waMhRNn d3gABxy+awA4YI54WPK/vMQjFxrf09lR43AjeX44lTgoHCkeTshBAUqkSY35JIRkqVwDWtBBCugx Z8A3PRO+Xycui4SKoRiOk2IyQH5HVVGDNEPvZ4BZypxi29g/cgrOx73KZ/Cr+D/KHLJfyj6VV8vF 01AK3/QB38uOI8U8TAg5Wc6G7zsMb6NBwTI2mqasco63EbDI5Aeci8vxMGjq5fJwrHyq5svysCZW DhXlsXIRCgvGaJ1aL8Ju5vHotTPs8W8mRJmmq78RyaOROmD34zyUtLrzoR/2UMTLZinKuFJ5Hdej WKXYwmzhdtMPMru4A/QTzH4uSqKKU+SU4g36DYWB8BxHgUwux4eC8CylVyg8OszqWdajwzpe5hPP uRRKfGHj5AqalSnVJpNVqWA4Nkr0g3KaQnRYYVF137XCnNM3VXPZHI4Fg/jTBi14llP9gTkfKkzl 4Yrycl0wmI9LYvvzctZp6jGkZI6lRpgTrf155uECGgvoE61abIm/fk15OY9QWEDaoZ04lfhC7cQX Yieh8klf9CnSRimEwbmx9xYIL1DP4ftzNZn+zQSSL7wicaQtfo5dy17C8wQ79IayZyt+zv9cRt9G taa22BYwK8lW9kn9IPOs4r+Yk8o3qbf0b5vfTf3KrDFFiTLksspkVlWlnaZ1lVa53VhqkpXa03mr M7k03eJwPux8epYks/AQSiysDQ69NoTLHKooH9IF8zVDCYp1pQGnw2Q0OTO9ma4MyqA3jikqDZQ6 OXA6vJla0vbfzxAj6f31XF44nZ4/44n9x8/8+2Mz8+2kMEt4VogLxw8fpnYws185fHnrwKJAh/DZ V19dWRRc8Znw6ukzpJu2otT3ovzX4mrlqLnNoaKVOsLLvLxX1aJbpFvLbKcHmAHdLnoXs0v3NK2m fAa5z0gZZFypxmohHoPFbIkSxyFn0/BiYuJihqCiYuj6EojWiSSXFGe6ArgQo86g4alsLCQnSdqb s/Lve/X52/Z0hMv6fiEMxu6h1jLHr0041/f4e58J6WO2LI1Dr/DmaWEI6ROtwhNIK4VpJeSLJ+/P oXmQQz2evHOaKJCX4TncKzIseA5bgITF/V6fU1BInKj/wzfzzrXL1OlYMV1w9XEmyDwvnIyDcI9w RZyE4PkQcFmY1MGx0A458DKZnNUaZRZ5NnhlOXK31qcr5Utk5fIy3SLo1q6Gu7Rb4V7tbnhIux9+ qT0JV2RfydNYmUJulJnlDK+z8laFSZcBLm2+bjxfoajQrdEdkR/WndQlJfPJCkqRrNPKZcAm8RSt U/B0khaoJBkt0+MuoRjaS+mS1UneZEtK02pzDu4O3OMWzfnz5li5RtoduNFxn+tMQYJKj0gbLCyA 5e0Ef+KCiwMlqPR6o0FcPmGWkKPCe5TwsfC6cJES3iPHiEo0CPT7OXt8V3OY1317cq6lssevrhZt 0OPI7+XICwWezrSEfA5XqtnAelMyfQSPd3zZlNcmszkyUjhTBldqSp2tsfrB68my5PijJP0GnRBt UvjCidgJJFAbDCLBFaKSx4JaE9JKhhUENTxgNKUTg57j0/FISY/qYhAVP5/kEZckO/Iyae8pbmst mv/Wr8YWlC1as2CmTOUXnk7iVISiurYIx4Wz1FnmuNBr9t19b541VltdtmX2wpd82Tv3dHW7g6me wvQJlVvvuz32Aq6K4LknsOMwxcHKkLOIYTw6lmOLCPHosIijWfwcQ9GUTCZKAkiUaAdpFs2f9jBj 4f/JWg3bKnF15aKlYvvD160UhUaJ+hYrhYtHe4Q3fZWEBLnwtpBEJpOQKBAUwaOSfR4Xf4cpY+ai xwnCWLg/NG0cVRJYTbYS5o10kvn3D3wfupLULJ72plhz8MyMyczLzPOJBUyqMiPV6B9r530Kpb9I OTYlDOG8sSW+CZnWcms4NVcWLrGMK/8dsYAT6shvYNgcXZYM0gVt8Mz770sWCZ3ImaAWNQsNKuoY ahhCzrBJTSLJhOM5yTIFSr2BxFbP4DneiWlnEZ7cafUoVRRlHvFiS1dGZkkx2rAU6p3U0oLQHG/V 9LFte+inp2WMb5/T7UtXCEPySctJyqFt2yg6LU14Ua2gx4Xben/+H3tmPrGM0mkNcpXG5G2aXLn4 /kuKZGvpxDFFnor723ZMmvR7QVU8pSxL7XOO9YRyS57c84c5hQbyGrIRdXlt/C/MXvYY7msHVIU8 cocySacCi1vHKxUON6s0bKasGTa7wq72Ki3OjF3OxqkJhsQuXxg2akNo1iq0uHxxh+kMesqV4c30 GkTVxLWO0aGVE810ghv0k3//9Fx/U2FQ+JikBSrDKz1r0oMP7xmbfvePmDnCi18IwmDA0biVPRa7 3JBVdK138IHehh331a/cHk3QOyn+JlOMcreh91kaqnnYuN9I9aeRyYYWXY9ulWK1Lmo4mXLKIDNT HGN7lXGnW3ljkkKleVbl1ivTNYFkOwTSTTarQxYwWeyOfmfd8HqG/U3ssuRvhnBDBtHpSFiU6XL0 k5K3EZdhQn8juhueczqoEg2MKWJMhNbInAXdO0rS0sbcN3+GnLgUM+4Vvha+/oroPjtDWLOQSh0d X1h1f8P6VZO3LJ61sfcoKfuaWEhZ9GOyT5JFBep0N8pCg6ubFvJ/pMIowmCjNDSY3BqeU9jcCqWB tqbYOTvtZax2a0BtSbfvctbV3OAyUS4oCdFlJqSC6oliaQejSbR0JUnElQEiydfFIukotWY37jnh 4vi9vf9XuErIuWfXd09oWnfXytVM2+wwJfsmtLOzhZR8TkwkdG3FM/efmlX8/Padv8U4KT9+nhmL 8kDXCxnwVGhyraxfv5M8jHEMkbOchrXWs7WayY57yT3J/XYFbaRNKcYUU52swdhgmmxtM7aZ5ljP k7eYj20fOq44NFNIrWYLu0nDYPjzYGjMtKS5SXck0UlJqZw7w8mbdP5UpZGmMuiAaW1Geodqg4pS Wd2UPenBdIvLjay4rp2icrZj/HBhKD/BjjOJEKI9dt0NAO5FtKBoXPHmnfgYDiLEzQhaDYwj5OUl SeQov/a2LW9OCqUoqZiR6xzX3FKabiIu5Zzt114WjhP7+3q69+5Fy++6uGBp54b6+/ZVZRelFnTO f4So0ECn4udtvGioEqqY25FParSuBTAnpBlIR6PBugvyeR3nUbuzo6Qi5Ehz+M3JBZRdZ/d4C/wp 1qK0zam58oDfUlh0g5gTpkgbRFGjJYqdqRgKVuDqRA9H2t1SUCHtNlyRDhdX4tTqUVMz3N7rixwv 2iYMnEqKdWNKqecHNi19KJjuGPuQcnxPiBgmrRF++YrwVRIJqFLzluwuzsjOn7nl1aufv3PbX3c+ seex++qXzp0yQK+w5Nz5b1e/PPvD6L7Hi4zeH1Ttra11VRLvtb+TejqxV7di4HCAfUmK1ceFMhqg gbRBG362OohmmOMVcnQgwHkJj8H6oLMxocVSsC6GtxgtVYQx4BMDVHTRIhwQ3kUtlYDBT4DCyqv4 GkTwKyIQMVanwRNKQY+kYMWBvcTCsCPDhmPDUUFFYYEUZ+0X/kJs2An7b8DYZi8zB79EHa8MQyla Rfw0jU8jggdhIb7TLMLvgasRr0G8FfEA4ocRP4z4SYQjCB9ifJWE7Z34VYvG2FiN37dy8b1HfHow BrPjqDa0tDKMHPIxrjRhHw6/TspJMvbQQhj0mEpHS2wDL2IL5EE+ceF4jfiNdNjsntBcHgpevr4a jHEqysMYVSZiBozmcaPjbaAxxBm2urjvb0g6DaJRRgdkEjF7//ZgnkZBCef1mQv6ck3Ce3r3wjU+ EzLZUJLfvHldeIKjrLllMTOnrDbYXLooNp06PCGrYV7x5NhKamunf9q03NbYMib0yEx3qHRMY0du Lq6/H4DpRF0X3/rqQ7ksMRAPKSUtyh4lR3QaTu7GDZfEKExswJRMWS1aMY4zW164rgLh2AnRtWDw j+qNYcNQRVBSbZCitX9ai5ceOCecN/n6HgikCRdISmlhS/9Cpu3gmVgGtXNW3oy1ld2xQSRxhqdK VEzci+hD9jLdKC3xrTQcyjLRRKbaotqioU1qc/ICNc26zXpe6U5Sms0yKmCyWmUBrcVijZK+QyMm RnIYuOmGX09w762AFcuHt59kVd34OgIlxeLTQKiL9967bl1//zoqT/hE+BDvT4gezb+F6GNn/zC4 b9/Bg/v2DS4QniIzP/2EzBF++QkVQl6uE5qZ3aibatSKKaFsU4pMkWal3A7eyincKUpLkkxtVgc0 1gzOnmo3ey3f6qMlCyh5BHTTCYcw7JAlT1aiE82d5LVFHyEpCN1754/RK3eXN61cZyNyIXZ646z8 XOEDos0rnruJeuT4z6aueiGcG32YCgofCJeEPwuvVrprYqfYS49Oyp6MbMY9tBEDjKtMG54CTDkC NJl0iEpWY5w4KWRJ4dWcSuGgCqgQRRvEODJJ6VVZ9IYomX/I2bjguq6/Jm3acLtoC5DVr4nmAB0Z mm3RwI0QS72tTEn1qX89zomhu6aqsHED00aIcJ6mllVsil1hql5YkjVRpIlC2b+F33k7IQf8sD40 Ta7hMi1qWs44lcp6xWTlJGe1oy77HC2zZThUCsaYwxitfr+OZ/xZSr8/2aBw2IzhDN6Qy4c91jwV 2MLJuRDOseTm3RBJXMYwXoqNLqMKYyCB7E8oSeyM5oy0UW9vv520E8nlSNGRB0OLkmLclszwO60U ZEgbWc+5HJklhHTJ00vun9GVlSXEjzQ0DJ07TUiK8BfOkr+8fZrPFz8wc8Zn14T4F/jRu63BESwq KrBYxufVVG/Y+afHT5U6xo71FhpNZVnTm9Y+duZP+2ncCAQM8b9Sq9ge3KdTDmv8yXaVX/scWQ4M aQsZeWjjCGdG0SRzlxm5F36KcjJHSdIhZ4contfKL8TKL5eL8vlbGHdpDHcp+qPCgpQS8VxljMGl Fd/KA6UGnsO1aQ27iPXgwYzZaltS/4tTCuglL5EC4eWXYscmOgl5neXDhQuoR0R9j3/EzETbYUHb 2BDKUxitRp+xzDiL7+Y5K68AzpikVrAYy1nVCq/VrLSmkYDZkpr2D+Mh7ktdMBx7TeK5GMWhyUdu Y7wtefgSUW0wDuLFUEgkzUMeNXpX/DSAfysQLjIO48R1Mz6fkU8+Yapid7TnN/eFFlLTr76wmy1K Kff/puMo9YAN6TQIk5hGpFM84fpTaJlXMUuxQPGgYp/irIJjFYTj0nitOpd3qMfzhep6vp0Xrd9K frVabUoOqPvlW5S7lFElp9erZGrKoVJ5dUqlguMpu0zmxXMiMalWGFRKuYzj5WCn/Cl2TbKeN6JA ktRKVZSoDmGFAnFIlfJTmaXbYHwyIZm+qZfDF8zXMH4VYeT1qyJ8IXYBnYV0WoQaSfCwiMXToqZV a34/ZvigSEyLr8v5iYh3ebudGAOlE4iXOFPxdYzCmCHTSw66fQ1WSw4jLCPj//YengoNLF7/fGZe Htn4CkUpdNrFKmbFtfO0++rLwosPEprDI0BK3Hz4jyHxXyffdlmxkEY/mYl+LwvjoxLpHzQ1UIv/ VqnDP4I1wDT0gdOhCZrxvzCzYDb+g6VNGoigPyVSihPPSGsbaitnTM2p617c1927sKszt+qOxfNF Xb9+if+VvBthOwKe8cCvEX6HcBrhPMInCNewgwohDcGPUI7QgNCGsBjhboTtCHsRfo3wO4TTCOcR PkG4Fh++cCwYSRO04DfnK0flJRN1Q/vqUfU1o/LhUfmmUflZo/Kdo/LzRuW7RuWRcTfRL8nuBvp+ MKp+4aj84lF56X+zN/RfOqr+jlF5UVY38m/FqPydo/K9o/J3jcrj4Q3A/wPp882fCmVuZHN0cmVh bQplbmRvYmoKNjIgMCBvYmoKNzE0NQplbmRvYmoKNjMgMCBvYmoKKHZ1bG5lcmFiaWxpdHlfc2Nl bmFyaW9fc2VxdWVuY2VfZGlhZ3JhbV92MSkKZW5kb2JqCjY0IDAgb2JqCihNYWMgT1MgWCAxMC4x Mi4xIFF1YXJ0eiBQREZDb250ZXh0KQplbmRvYmoKNjUgMCBvYmoKKEFkYW0gTW9udHZpbGxlKQpl bmRvYmoKNjYgMCBvYmoKKE9tbmlHcmFmZmxlIFByb2Zlc3Npb25hbCA1LjQuNCkKZW5kb2JqCjY3 IDAgb2JqCihEOjIwMTYxMjA5MTcwMTUwWjAwJzAwJykKZW5kb2JqCjEgMCBvYmoKPDwgL1RpdGxl IDYzIDAgUiAvQXV0aG9yIDY1IDAgUiAvUHJvZHVjZXIgNjQgMCBSIC9DcmVhdG9yIDY2IDAgUiAv Q3JlYXRpb25EYXRlCjY3IDAgUiAvTW9kRGF0ZSA2NyAwIFIgPj4KZW5kb2JqCnhyZWYKMCA2OAow MDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwNDU3NTQgMDAwMDAgbiAKMDAwMDAwMzQ1MyAwMDAwMCBu IAowMDAwMDI4NDcwIDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMzQzMyAwMDAw MCBuIAowMDAwMDAzNTgyIDAwMDAwIG4gCjAwMDAwMjg0MzQgMDAwMDAgbiAKMDAwMDAwNDkyOCAw MDAwMCBuIAowMDAwMDA1MjUxIDAwMDAwIG4gCjAwMDAwMDQ2MDEgMDAwMDAgbiAKMDAwMDAwNDkw OCAwMDAwMCBuIAowMDAwMDA1NzQ0IDAwMDAwIG4gCjAwMDAwMDYwNTQgMDAwMDAgbiAKMDAwMDAw NTI3MCAwMDAwMCBuIAowMDAwMDA1NzI0IDAwMDAwIG4gCjAwMDAwMDQzMjQgMDAwMDAgbiAKMDAw MDAwNDU4MiAwMDAwMCBuIAowMDAwMDA2MDc0IDAwMDAwIG4gCjAwMDAwMDYzMzIgMDAwMDAgbiAK MDAwMDAwNjM1MSAwMDAwMCBuIAowMDAwMDA2Njc2IDAwMDAwIG4gCjAwMDAwMDY2OTYgMDAwMDAg biAKMDAwMDAwNjk1NCAwMDAwMCBuIAowMDAwMDAzODUwIDAwMDAwIG4gCjAwMDAwMDQzMDQgMDAw MDAgbiAKMDAwMDAyNzE5NCAwMDAwMCBuIAowMDAwMDM3NjIxIDAwMDAwIG4gCjAwMDAwMjg2MTcg MDAwMDAgbiAKMDAwMDAwNjk3MyAwMDAwMCBuIAowMDAwMDEzMjg5IDAwMDAwIG4gCjAwMDAwMjU5 MTYgMDAwMDAgbiAKMDAwMDAxMzMxMCAwMDAwMCBuIAowMDAwMDE0NTAwIDAwMDAwIG4gCjAwMDAw MjEwMDQgMDAwMDAgbiAKMDAwMDAyMjA3MiAwMDAwMCBuIAowMDAwMDE0NTIwIDAwMDAwIG4gCjAw MDAwMTU1OTAgMDAwMDAgbiAKMDAwMDAxNzUyMCAwMDAwMCBuIAowMDAwMDE4NjM3IDAwMDAwIG4g CjAwMDAwMTg2NTcgMDAwMDAgbiAKMDAwMDAxOTg0NyAwMDAwMCBuIAowMDAwMDE1NjEwIDAwMDAw IG4gCjAwMDAwMTY0MTIgMDAwMDAgbiAKMDAwMDAyMjA5MiAwMDAwMCBuIAowMDAwMDIzMTYwIDAw MDAwIG4gCjAwMDAwMTk4NjcgMDAwMDAgbiAKMDAwMDAyMDk4NCAwMDAwMCBuIAowMDAwMDE2NDMy IDAwMDAwIG4gCjAwMDAwMTc1MDAgMDAwMDAgbiAKMDAwMDAyMzE4MCAwMDAwMCBuIAowMDAwMDI1 ODk1IDAwMDAwIG4gCjAwMDAwMjU5NTMgMDAwMDAgbiAKMDAwMDAyNzE3MyAwMDAwMCBuIAowMDAw MDI3MjMxIDAwMDAwIG4gCjAwMDAwMjg0MTMgMDAwMDAgbiAKMDAwMDAyODU1MyAwMDAwMCBuIAow MDAwMDI5MjMzIDAwMDAwIG4gCjAwMDAwMjk0NTggMDAwMDAgbiAKMDAwMDAzNzYwMCAwMDAwMCBu IAowMDAwMDM4MDI4IDAwMDAwIG4gCjAwMDAwMzgyNTkgMDAwMDAgbiAKMDAwMDA0NTQ5NSAwMDAw MCBuIAowMDAwMDQ1NTE2IDAwMDAwIG4gCjAwMDAwNDU1NzcgMDAwMDAgbiAKMDAwMDA0NTYzMCAw MDAwMCBuIAowMDAwMDQ1NjYzIDAwMDAwIG4gCjAwMDAwNDU3MTIgMDAwMDAgbiAKdHJhaWxlcgo8 PCAvU2l6ZSA2OCAvUm9vdCA1NiAwIFIgL0luZm8gMSAwIFIgL0lEIFsgPDExOGJiZTdkYWU1MzQx ZmI4NmQ0MDFkYTNmYWJiN2U4Pgo8MTE4YmJlN2RhZTUzNDFmYjg2ZDQwMWRhM2ZhYmI3ZTg+IF0g Pj4Kc3RhcnR4cmVmCjQ1ODc0CiUlRU9GCg== --001a11426aa662a2e8054dacd997-- From nobody Mon Apr 24 11:05:35 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 710AD131910 for ; Mon, 24 Apr 2017 11:05:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tSoGnsF1XKYO for ; Mon, 24 Apr 2017 11:05:33 -0700 (PDT) Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5D8713190E for ; Mon, 24 Apr 2017 11:05:24 -0700 (PDT) Received: by mail-qt0-x234.google.com with SMTP id c45so120629672qtb.1 for ; Mon, 24 Apr 2017 11:05:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BV/9062Zyq3uUPCnPnkg63uJ/7pEQKqhtGmALyBjPO4=; b=qfCkB+j9RoDzSKTZE6He1A756K0xLCAWLOQcdhbgS/PTLmwED88tXhVbl0TYejq48M T16+O7OLLZInqTx0eoCrP+2h3YJeRbBI/19LcFLlGHfVM/wYgTGsdWsNk7n2BzdQQFXD ONjghe+pP0MpmflObJn/GVZgZXq9xBpHAGZpR3S/XLDzH0tcuoG8swJpkmlAYOaShVl0 /HP63YQY9KgKwMSpIPCpiQVMHSe8t33U/4ZktIGqy3qd85Mk9vCe5950UsSVSHBDVHSo F+5FS/yZv3wRAOD4umI5PQjIJ2wchS0mxMq9dyRC2qg991zY4RygHe7Ag6LHBoZh4o1G +z3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BV/9062Zyq3uUPCnPnkg63uJ/7pEQKqhtGmALyBjPO4=; b=LaRHXj+lqcUsG8cyYfnut/gX4prJiQSfsOG4o1Mpw7dqOjp4PO/g2/p4YCzzIGMCaV gWIfzkmU0ZLkwBq+qdJ05I+pGVIh1Flqltm6oyu2QWJJ2PKVvg9n6GlaSI/PsvQTHv6F /xSfYnfy8pBlA2WFr8YiOn1RLejoKF7SyRVAYX9ZKSRsiilBeinr7U/KKnULexe2b5yB OXo0l+OQjTa7HEBj9NnUGS5oeXYNi+IJD+aFTpxSkhdxEOYHfjZcQrIKcTTQuEs/Ug33 aOK7GNiFZWir4VNz0KzHFUo8xgneeDMGULgoPUlD0ngjQYXA8/KnqcdTb0OW98g8lyGr y+QA== X-Gm-Message-State: AN3rC/6uEu8IM85NA714Om3GwDDZ2N1GHSfOF3p884cWKMv8v2K5gHK6 /cbtt16S7jlbqIaPFEp3pHmVIDxWyw== X-Received: by 10.200.51.70 with SMTP id u6mr26388747qta.122.1493057123923; Mon, 24 Apr 2017 11:05:23 -0700 (PDT) MIME-Version: 1.0 Received: by 10.140.81.73 with HTTP; Mon, 24 Apr 2017 11:05:23 -0700 (PDT) In-Reply-To: References: From: Jessica Fitzgerald-McKay Date: Mon, 24 Apr 2017 14:05:23 -0400 Message-ID: To: Kathleen Moriarty Cc: "sacm@ietf.org" Content-Type: multipart/alternative; boundary=001a113a4084803cc0054ded73fd Archived-At: Subject: Re: [sacm] Fwd: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Apr 2017 18:05:34 -0000 --001a113a4084803cc0054ded73fd Content-Type: text/plain; charset=UTF-8 Kathleen, Thanks for the link. I would certainly be interested in hearing Benoit's yang overview. Jess On Wed, Apr 19, 2017 at 3:31 PM, Kathleen Moriarty < kathleen.moriarty.ietf@gmail.com> wrote: > For those interested, Benoit has offered to provide an overview of the > YANG catalog on a call, perhaps as part of an interim if we would like > to make sure there is ample notice and agreement on times for this > overview. Please let me know if the WG is interested and I'd be happy > to help arrange it. Se the referenced blog for more information. > > Kathleen > > ---------- Forwarded message ---------- > From: Benoit Claise > Date: Wed, Apr 19, 2017 at 2:35 PM > Subject: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) > To: IETF-Discussion list > > > Dear all, > > https://www.ietf.org/blog/2017/04/yang-catalog-latest- > development-ietf-98-hackathon/ > Enjoy. > > Regards, Benoit > > > > -- > > Best regards, > Kathleen > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > --001a113a4084803cc0054ded73fd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Ka= thleen,
Th= anks for the link. I would certainly be interested in hearing Benoit's = yang overview.

Jess

On Wed, Apr 19, 2017 at 3:31 PM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:
For those interested, Benoit has offered to provide an o= verview of the
YANG catalog on a call, perhaps as part of an interim if we would like
to make sure there is ample notice and agreement on times for this
overview.=C2=A0 Please let me know if the WG is interested and I'd be h= appy
to help arrange it.=C2=A0 Se the referenced blog for more information.

Kathleen

---------- Forwarded message ----------
From: Benoit Claise <bclaise@cisco.= com>
Date: Wed, Apr 19, 2017 at 2:35 PM
Subject: Blog: YANG Catalog Latest Development (IETF 98 Hackathon)
To: IETF-Discussion list <ietf@ietf.org= >


Dear all,

https://www.ietf= .org/blog/2017/04/yang-catalog-latest-development-ietf-98-hackath= on/
Enjoy.

Regards, Benoit



--

Best regards,
Kathleen

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

--001a113a4084803cc0054ded73fd-- From nobody Tue Apr 25 10:11:48 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51388131719 for ; Tue, 25 Apr 2017 10:11:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l0rngHccnLVP for ; Tue, 25 Apr 2017 10:11:25 -0700 (PDT) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0137.outbound.protection.outlook.com [23.103.200.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 274E81316D6 for ; Tue, 25 Apr 2017 10:09:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=1oQWEIUwK2xlSc6qYnv7rArovWbZpl+tKP163Ln3BCE=; b=zxpzGcubrECCALt6hJnWdr3WphheIFgSxErg1znIdwhPRnoLfnhGyJXjodFfvXQ341RgNwtAU8GG3Qjs7h5ZSn+uB6+oPVNWSXFczytza7rtOB1T/scV4m7jPcIRlS/KlCW9Cg6+ME+6A6+3MENQblmAv0Pl2VqQEnPc6fNjaBE= Received: from MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) by MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.13; Tue, 25 Apr 2017 17:09:49 +0000 Received: from MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) by MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) with mapi id 15.01.1047.019; Tue, 25 Apr 2017 17:09:49 +0000 From: "Waltermire, David A. (Fed)" To: "sacm@ietf.org" Thread-Topic: Proposed Timeline for the SACM Hackathon Team Thread-Index: AdK95rc3LVP/2CZeTL6au5MmTk/jpw== Date: Tue, 25 Apr 2017 17:09:49 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nist.gov; x-originating-ip: [129.6.224.58] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR09MB1440; 7:t/FEcbym0O83PQ7cFS66RM5gCkBHAV59dI7tcv3+0nxPVVfn+0zhnieXThB4685x4xoxp6rKYheuG6tzBkqQXiJ1N4hPKbuTC5XACmjBBXXcLqAxSn06KuNhHHpq4hy6o/7UB4LERSMQB/c/2QcVXEroh5hMmJCM5rT2iOrpfBCdq8J+GpCBm+YeCmhXAadBLgBZIEHa6v4Iy9Hqlsa/JZjK4We5HlFNQRi2iRLIaTHzojD6epDUDuGrN4wGREgCR73J54ZIC3nOT/iNyfSiNmp1+zTHDdM49WetYFp2l7CdXQXKACORzL3uBWIcshHhyWtBs4SklayzrCDgsQuIwA== x-ms-office365-filtering-correlation-id: 9fa243ff-c0d8-43a9-fff0-08d48bfde1ca x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:MWHPR09MB1440; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(6072148); SRVR:MWHPR09MB1440; BCL:0; PCL:0; RULEID:; SRVR:MWHPR09MB1440; x-forefront-prvs: 0288CD37D9 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39840400002)(39850400002)(39400400002)(39450400003)(39410400002)(54356999)(189998001)(2906002)(50986999)(3280700002)(3660700001)(86362001)(1730700003)(81166006)(122556002)(575784001)(6916009)(2351001)(33656002)(66066001)(8676002)(99286003)(55016002)(6306002)(8936002)(9686003)(6436002)(6506006)(5640700003)(53936002)(5660300001)(7736002)(77096006)(110136004)(2501003)(25786009)(6116002)(74316002)(102836003)(305945005)(3846002)(38730400002)(7696004)(2900100001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1440; H:MWHPR09MB1440.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Apr 2017 17:09:49.5565 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1440 Archived-At: Subject: [sacm] Proposed Timeline for the SACM Hackathon Team X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Apr 2017 17:11:32 -0000 Adam and I met on Friday to discuss a schedule for the SACM Hackathon team.= The following are the milestones we came up with. Any bashing of the overa= ll schedule? April 28, 2017 - Identify goals based on the Vulnerability Assessment Scena= rio. The working group will identify a set of achievable goals and stretch = goals that will establish priorities for what we build during the Hackathon= . These goals will be based on the vulnerability assessment scenario. [1] May 5, 2017 - Identify existing code modules for SACM components; identify = gaps that need to be implemented. The working group will identify existing = software that can be used to assemble SACM components and any gaps that nee= d to be filled. [2] May 19, 2017 - Identify providers of existing code modules, and developers = of new code modules. The working group will identify volunteers to provide = existing code modules and developers to work on new modules, enhancements t= o existing modules, and any glue code that is need to form a solution. Week of May 29, 2017 - Host a conference call to Plan deployment. The worki= ng group will figure out what the operational environment will look like to= use for integration testing during the Hackathon. Specific individuals wil= l be identified for deploying and configuring specific code modules. June 30, 2017 - Complete development of code modules identified for enhance= ment, to fill gaps, or as glue code. Week of June 26, 2017 - Host a full day conference call to facilitate integ= ration of components and to identify interoperability defects, and other fu= nctional issues. The participants will conduct an integration and interoper= ability exercise to test the deployment. Any issues will be identified to b= e addressed before the Hackathon. This dry run will help to identify potent= ial problems that can be addressed prior to Prague. July 14, 2017 - Complete updates to address issues prior to Hackathon. July, 15 and 16, 2017 - Hackathon - Conduct integration and interoperabili= ty testing of code modules. Resolve any defects that come up. [1] https://trac.ietf.org/trac/sacm/wiki/SacmVulnerabilityAssessmentScenari= o [2] https://mailarchive.ietf.org/arch/msg/sacm/w_kL2vzDBPk0NN9N1WQcpb3Qwfw Regards, David Waltermire From nobody Tue Apr 25 10:49:47 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 260B1127868 for ; Tue, 25 Apr 2017 10:49:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Y9oMgyyu3zh for ; Tue, 25 Apr 2017 10:49:44 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 589CB13013D for ; Tue, 25 Apr 2017 10:49:44 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id D953873C013; Tue, 25 Apr 2017 13:49:54 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id C2A3673C01D; Tue, 25 Apr 2017 13:49:54 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 25 Apr 2017 13:49:43 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Tue, 25 Apr 2017 13:49:43 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RtUkaCi2x62ve4jkV8luplrwnwNYIZgI9tf9NBDjwdc=; b=uREoIRNj5JCWlU9yRYQjz+mSWtFnhDUGyO9dZwP7b/7kHRpKaOGz+I1hKBeJHOfCe8WHBhB1AooaSX/bkp63TJolNmbQeDpGagvaMjhmBlviXwRYPyzSw7ZDGL+TwETurd29It6vpYvCvN6d4TlruT6/Uk5sOHW57bI0u7vN9cI= Received: from DM5PR09MB1354.namprd09.prod.outlook.com (10.172.38.135) by DM5PR09MB1356.namprd09.prod.outlook.com (10.172.39.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.13; Tue, 25 Apr 2017 17:49:42 +0000 Received: from DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) by DM5PR09MB1354.namprd09.prod.outlook.com ([10.172.38.135]) with mapi id 15.01.1061.011; Tue, 25 Apr 2017 17:49:42 +0000 From: "Haynes, Dan" To: Jessica Fitzgerald-McKay , Kathleen Moriarty CC: "sacm@ietf.org" Thread-Topic: [sacm] Fwd: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) Thread-Index: AQHSuUPBujusafgxlUGnpmW/r4bvl6HU2CeAgAGN47A= Date: Tue, 25 Apr 2017 17:49:41 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.160.51.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR09MB1356; 7:GMjO53/BabFOMCGbpq6wF8JcP33UJuUDB8TYAoa0PuisyMhaqlxjD//TL2OWfEbft8hE39SBCi18TpaKEHA6I8SZSIbCJgsxyGWV/NFcwF1klFQ73cDOAc1NKeYk0hMNW8LhBoxoTRTFlPXA2PxEGJ1wn1YfzsHybVVvNVf0naO3cPBgqif0hYBO+r0GV6zkz1HjEa2Tkku57Cn0q/jqX/XWFh2VgmTXdQ3g0LtdeYHHCTqV3d/WiROshKVkUZbf82/1S+PNcuGsrMYbyfsjuf18QQCNbtCoSNV2Ar64R93Ypx57hHB46AloCRlCURFA6pKfpddGvWhFsrnXDX7vng== x-ms-office365-filtering-correlation-id: 859d4367-7d1a-4674-d917-08d48c0373e4 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:DM5PR09MB1356; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:DM5PR09MB1356; BCL:0; PCL:0; RULEID:; SRVR:DM5PR09MB1356; x-forefront-prvs: 0288CD37D9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39840400002)(39860400002)(39850400002)(39400400002)(39450400003)(39410400002)(51914003)(24454002)(22974007)(377454003)(8676002)(7906003)(606005)(6246003)(54896002)(86362001)(6306002)(7696004)(9686003)(3280700002)(81166006)(6436002)(2950100002)(25786009)(189998001)(2906002)(50986999)(54356999)(229853002)(38730400002)(7736002)(55016002)(53546009)(99286003)(3660700001)(76176999)(5660300001)(39060400002)(66066001)(19609705001)(102836003)(6116002)(6506006)(790700001)(33656002)(122556002)(3846002)(2900100001)(77096006)(53936002)(106356001)(4326008)(236005)(8936002)(74316002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR09MB1356; H:DM5PR09MB1354.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR09MB1354575D6A0E832A08F8EBBFA51E0DM5PR09MB1354namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Apr 2017 17:49:42.0288 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR09MB1356 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Fwd: Blog: YANG Catalog Latest Development (IETF 98 Hackathon) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Apr 2017 17:49:46 -0000 --_000_DM5PR09MB1354575D6A0E832A08F8EBBFA51E0DM5PR09MB1354namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB3b3VsZCBiZSBpbnRlcmVzdGVkIHRvby4NCg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQpGcm9tOiBz YWNtIFttYWlsdG86c2FjbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSmVzc2ljYSBG aXR6Z2VyYWxkLU1jS2F5DQpTZW50OiBNb25kYXksIEFwcmlsIDI0LCAyMDE3IDI6MDUgUE0NClRv OiBLYXRobGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20+DQpD Yzogc2FjbUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtzYWNtXSBGd2Q6IEJsb2c6IFlBTkcgQ2F0 YWxvZyBMYXRlc3QgRGV2ZWxvcG1lbnQgKElFVEYgOTggSGFja2F0aG9uKQ0KDQpLYXRobGVlbiwN ClRoYW5rcyBmb3IgdGhlIGxpbmsuIEkgd291bGQgY2VydGFpbmx5IGJlIGludGVyZXN0ZWQgaW4g aGVhcmluZyBCZW5vaXQncyB5YW5nIG92ZXJ2aWV3Lg0KSmVzcw0KDQpPbiBXZWQsIEFwciAxOSwg MjAxNyBhdCAzOjMxIFBNLCBLYXRobGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4ubW9yaWFydHkuaWV0 ZkBnbWFpbC5jb208bWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPj4gd3Jv dGU6DQpGb3IgdGhvc2UgaW50ZXJlc3RlZCwgQmVub2l0IGhhcyBvZmZlcmVkIHRvIHByb3ZpZGUg YW4gb3ZlcnZpZXcgb2YgdGhlDQpZQU5HIGNhdGFsb2cgb24gYSBjYWxsLCBwZXJoYXBzIGFzIHBh cnQgb2YgYW4gaW50ZXJpbSBpZiB3ZSB3b3VsZCBsaWtlDQp0byBtYWtlIHN1cmUgdGhlcmUgaXMg YW1wbGUgbm90aWNlIGFuZCBhZ3JlZW1lbnQgb24gdGltZXMgZm9yIHRoaXMNCm92ZXJ2aWV3LiAg UGxlYXNlIGxldCBtZSBrbm93IGlmIHRoZSBXRyBpcyBpbnRlcmVzdGVkIGFuZCBJJ2QgYmUgaGFw cHkNCnRvIGhlbHAgYXJyYW5nZSBpdC4gIFNlIHRoZSByZWZlcmVuY2VkIGJsb2cgZm9yIG1vcmUg aW5mb3JtYXRpb24uDQoNCkthdGhsZWVuDQoNCi0tLS0tLS0tLS0gRm9yd2FyZGVkIG1lc3NhZ2Ug LS0tLS0tLS0tLQ0KRnJvbTogQmVub2l0IENsYWlzZSA8YmNsYWlzZUBjaXNjby5jb208bWFpbHRv OmJjbGFpc2VAY2lzY28uY29tPj4NCkRhdGU6IFdlZCwgQXByIDE5LCAyMDE3IGF0IDI6MzUgUE0N ClN1YmplY3Q6IEJsb2c6IFlBTkcgQ2F0YWxvZyBMYXRlc3QgRGV2ZWxvcG1lbnQgKElFVEYgOTgg SGFja2F0aG9uKQ0KVG86IElFVEYtRGlzY3Vzc2lvbiBsaXN0IDxpZXRmQGlldGYub3JnPG1haWx0 bzppZXRmQGlldGYub3JnPj4NCg0KDQpEZWFyIGFsbCwNCg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv YmxvZy8yMDE3LzA0L3lhbmctY2F0YWxvZy1sYXRlc3QtZGV2ZWxvcG1lbnQtaWV0Zi05OC1oYWNr YXRob24vDQpFbmpveS4NCg0KUmVnYXJkcywgQmVub2l0DQoNCg0KDQotLQ0KDQpCZXN0IHJlZ2Fy ZHMsDQpLYXRobGVlbg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0Kc2FjbSBtYWlsaW5nIGxpc3QNCnNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0 Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20NCg0K --_000_DM5PR09MB1354575D6A0E832A08F8EBBFA51E0DM5PR09MB1354namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uaG9lbnpiDQoJe21z by1zdHlsZS1uYW1lOmhvZW56Yjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4g MS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRp dCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVk aXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hl YWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5JIHdvdWxkIGJlIGludGVyZXN0ZWQgdG9vLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5UaGFua3MsPGJy Pg0KPGJyPg0KRGFubnk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4g MGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj4gc2FjbSBbbWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJl aGFsZiBPZiA8L2I+SmVzc2ljYSBGaXR6Z2VyYWxkLU1jS2F5PGJyPg0KPGI+U2VudDo8L2I+IE1v bmRheSwgQXByaWwgMjQsIDIwMTcgMjowNSBQTTxicj4NCjxiPlRvOjwvYj4gS2F0aGxlZW4gTW9y aWFydHkgJmx0O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNj OjwvYj4gc2FjbUBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3NhY21dIEZ3ZDog QmxvZzogWUFORyBDYXRhbG9nIExhdGVzdCBEZXZlbG9wbWVudCAoSUVURiA5OCBIYWNrYXRob24p PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkthdGhsZWVuLDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5UaGFua3MgZm9yIHRoZSBs aW5rLiBJIHdvdWxkIGNlcnRhaW5seSBiZSBpbnRlcmVzdGVkIGluIGhlYXJpbmcgQmVub2l0J3Mg eWFuZyBvdmVydmlldy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkplc3M8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdl ZCwgQXByIDE5LCAyMDE3IGF0IDM6MzEgUE0sIEthdGhsZWVuIE1vcmlhcnR5ICZsdDs8YSBocmVm PSJtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5r Ij5rYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9v OnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvciB0aG9zZSBpbnRl cmVzdGVkLCBCZW5vaXQgaGFzIG9mZmVyZWQgdG8gcHJvdmlkZSBhbiBvdmVydmlldyBvZiB0aGU8 YnI+DQpZQU5HIGNhdGFsb2cgb24gYSBjYWxsLCBwZXJoYXBzIGFzIHBhcnQgb2YgYW4gaW50ZXJp bSBpZiB3ZSB3b3VsZCBsaWtlPGJyPg0KdG8gbWFrZSBzdXJlIHRoZXJlIGlzIGFtcGxlIG5vdGlj ZSBhbmQgYWdyZWVtZW50IG9uIHRpbWVzIGZvciB0aGlzPGJyPg0Kb3ZlcnZpZXcuJm5ic3A7IFBs ZWFzZSBsZXQgbWUga25vdyBpZiB0aGUgV0cgaXMgaW50ZXJlc3RlZCBhbmQgSSdkIGJlIGhhcHB5 PGJyPg0KdG8gaGVscCBhcnJhbmdlIGl0LiZuYnNwOyBTZSB0aGUgcmVmZXJlbmNlZCBibG9nIGZv ciBtb3JlIGluZm9ybWF0aW9uLjxicj4NCjxicj4NCkthdGhsZWVuPGJyPg0KPGJyPg0KLS0tLS0t LS0tLSBGb3J3YXJkZWQgbWVzc2FnZSAtLS0tLS0tLS0tPGJyPg0KRnJvbTogQmVub2l0IENsYWlz ZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJjbGFpc2VAY2lzY28uY29tIj5iY2xhaXNlQGNpc2NvLmNv bTwvYT4mZ3Q7PGJyPg0KRGF0ZTogV2VkLCBBcHIgMTksIDIwMTcgYXQgMjozNSBQTTxicj4NClN1 YmplY3Q6IEJsb2c6IFlBTkcgQ2F0YWxvZyBMYXRlc3QgRGV2ZWxvcG1lbnQgKElFVEYgOTggSGFj a2F0aG9uKTxicj4NClRvOiBJRVRGLURpc2N1c3Npb24gbGlzdCAmbHQ7PGEgaHJlZj0ibWFpbHRv OmlldGZAaWV0Zi5vcmciPmlldGZAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxicj4NCjxicj4NCkRl YXIgYWxsLDxicj4NCjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL2Jsb2cvMjAx Ny8wNC95YW5nLWNhdGFsb2ctbGF0ZXN0LWRldmVsb3BtZW50LWlldGYtOTgtaGFja2F0aG9uLyIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL2Jsb2cvMjAxNy8wNC95YW5nLWNh dGFsb2ctbGF0ZXN0LWRldmVsb3BtZW50LWlldGYtOTgtaGFja2F0aG9uLzwvYT48YnI+DQpFbmpv eS48YnI+DQo8YnI+DQpSZWdhcmRzLCBCZW5vaXQ8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6Izg4 ODg4OCI+PGJyPg0KPGJyPg0KPGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+LS08L3NwYW4+PGJy Pg0KPGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+QmVzdCByZWdhcmRzLDwvc3Bhbj48YnI+DQo8 c3BhbiBjbGFzcz0iaG9lbnpiIj5LYXRobGVlbjwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBjbGFz cz0iaG9lbnpiIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzwvc3Bhbj48YnI+DQo8c3BhbiBjbGFzcz0iaG9lbnpiIj5zYWNtIG1haWxpbmcgbGlzdDwvc3Bh bj48YnI+DQo8c3BhbiBjbGFzcz0iaG9lbnpiIj48YSBocmVmPSJtYWlsdG86c2FjbUBpZXRmLm9y ZyI+c2FjbUBpZXRmLm9yZzwvYT48L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+PGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtPC9hPjwv c3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_DM5PR09MB1354575D6A0E832A08F8EBBFA51E0DM5PR09MB1354namp_-- From nobody Wed Apr 26 09:02:22 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D74CD131450 for ; Wed, 26 Apr 2017 09:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.403 X-Spam-Level: X-Spam-Status: No, score=-0.403 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yGaW4VVAcxlU for ; Wed, 26 Apr 2017 09:02:19 -0700 (PDT) Received: from o11.sgmail.github.com (o11.sgmail.github.com [167.89.101.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95A5B13144B for ; Wed, 26 Apr 2017 09:02:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=/gclFxbnDJvL35Gt42Ro6MSZJ8M=; b=nscNlZdvDJeDnJ1J XpSCHTs9+yEirvRcMDLTcYpSGskHRj15SwEh+eV9nyEMlPTofhnzS1LgX8H7oOJc jQteJUuArHt7MidCLrFL0+vb+koLq7A9+IR9GDkSmH01Dw+12WEN+NrwHCyq7wNn ZOzZ2/ia3Qo9Ki6ecEEEiSVVXs8= Received: by filter0617p1mdw1.sendgrid.net with SMTP id filter0617p1mdw1-22442-5900C45B-3D 2017-04-26 16:01:31.683900026 +0000 UTC Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2a-ext-cp1-prd.iad.github.net [192.30.253.16]) by ismtpd0004p1iad1.sendgrid.net (SG) with ESMTP id 8Eq1tEHYRLSLMChRfb9kVQ for ; Wed, 26 Apr 2017 16:01:31.679 +0000 (UTC) Date: Wed, 26 Apr 2017 09:01:31 -0700 From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5900c45b73595_3e5b3f877d423c38704b8"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H2/wL8Bw3jPjT0hekytArJyl2pzq2v84Kwg40s5FPPZZmaritb8FO/A2Pp /O2yywtnmjGb0eR+7HzQhAYbfgg47wjGaAO1nw8ukkA1h9P971GqQSVBTNMnYHb2giHFp/7LF2m5hD DJpUy4Vhr6a/S+OuyMZ2U+83gnegUomrZdvNPO5chcVWi2TR72ImpQSLig== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Apr 2017 16:02:21 -0000 ----==_mimepart_5900c45b73595_3e5b3f877d423c38704b8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Hi Jerome, Should we just add a "library" value to the softwareClass enumeration and add the filepath IE to the softwareClass IE? If not, could you please propose a new IE using the format described in the IM? Thanks, Danny -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-297458862 ----==_mimepart_5900c45b73595_3e5b3f877d423c38704b8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi Jerome,

Should we just add a "library" value to the softwareClass enumeration an= d add the filepath IE to the softwareClass IE? If not, could you please pro= pose a new IE using the format described in the IM?

Thanks,

Danny

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_5900c45b73595_3e5b3f877d423c38704b8-- From nobody Thu Apr 27 07:48:47 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BD88129564 for ; Thu, 27 Apr 2017 07:48:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.181 X-Spam-Level: X-Spam-Status: No, score=-8.181 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nJ41NlK_a3ck for ; Thu, 27 Apr 2017 07:48:45 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C7331296C9 for ; Thu, 27 Apr 2017 07:48:30 -0700 (PDT) Date: Thu, 27 Apr 2017 07:48:29 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1493304509; bh=sZ5oEmHE0A1psJE5Ikf6wD7RfXbnCelZ87sty0T7AfQ=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=BQsBkS4qQUu0uTmZw+rHgccrJoAgn5Ii39RZg5ZXlncOcG0tPyNMJ3b+jRoD0g34J RDAAuDtY7FX3wxEefXhgTETJUnooFm/HPdWPCkcLf0Of0GCGNfqVD9uRAuhhRx10Ft Hlh0YdIxsiuH/M59/VDsiYrwlPMOsgu3v8LxF7PY= From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_590204bd17b35_51133fc34ead1c30110242"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] create IEs for Vulnerability Assessment Scenario information needs (#43) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Apr 2017 14:48:46 -0000 ----==_mimepart_590204bd17b35_51133fc34ead1c30110242 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #43 via 05168d9eb33a6bdc1bcd91907769e30839ea42be. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/43#event-1060549277 ----==_mimepart_590204bd17b35_51133fc34ead1c30110242 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #43 via 05168d9.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_590204bd17b35_51133fc34ead1c30110242-- From nobody Thu Apr 27 07:57:21 2017 Return-Path: X-Original-To: sacm@ietf.org Delivered-To: sacm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D86BE1296C9; Thu, 27 Apr 2017 07:57:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sacm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.50.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <149330503384.2959.14882843753141967423@ietfa.amsl.com> Date: Thu, 27 Apr 2017 07:57:13 -0700 Archived-At: Subject: [sacm] I-D Action: draft-ietf-sacm-information-model-10.txt X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Apr 2017 14:57:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Automation and Continuous Monitoring of the IETF. Title : SACM Information Model Authors : David Waltermire Kim Watson Clifford Kahn Lisa Lorenzin Michael Cokus Daniel Haynes Henk Birkholz Filename : draft-ietf-sacm-information-model-10.txt Pages : 158 Date : 2017-04-27 Abstract: This document defines the Information Elements that are transported between SACM components and their interconnected relationships. The primary purpose of the Secure Automation and Continuous Monitoring (SACM) Information Model is to ensure the interoperability of corresponding SACM data models and addresses the use cases defined by SACM. The Information Elements and corresponding types are maintained as the IANA "SACM Information Elements" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sacm-information-model-10 https://datatracker.ietf.org/doc/html/draft-ietf-sacm-information-model-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sacm-information-model-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Apr 27 08:21:19 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A64A129AE9 for ; Thu, 27 Apr 2017 08:21:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.8 X-Spam-Level: X-Spam-Status: No, score=-4.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xl4zn0e0qs5g for ; Thu, 27 Apr 2017 08:21:15 -0700 (PDT) Received: from o3.sgmail.github.com (o3.sgmail.github.com [192.254.112.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81A9C129A98 for ; Thu, 27 Apr 2017 08:20:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=klazRsEFadYszDE9MHPpWh1fY3Y=; b=Rku36HzEG+tB+otL fOrXE3oLwW3uEOnXNtFYhgLMWONrlAQjineuxxO0Bo/dW4WiEEOmxe39Jca/CrZm DFy/U4cgAtz0IbucR7WQ9a0DQDm4m+sIocIb6+7+NaEYYM/dcui98n1YH52JF14V m1iIRImQYoktGh06ZAEbMQGACxM= Received: by filter0949p1mdw1.sendgrid.net with SMTP id filter0949p1mdw1-31852-59020C28-CB 2017-04-27 15:20:08.68853141 +0000 UTC Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2b-ext-cp1-prd.iad.github.net [192.30.253.17]) by ismtpd0003p1iad1.sendgrid.net (SG) with ESMTP id mhJ0migpQEePOv-3QW-WeQ for ; Thu, 27 Apr 2017 15:20:08.530 +0000 (UTC) Date: Thu, 27 Apr 2017 08:20:08 -0700 From: Danny Haynes Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_59020c28622e5_61cb3fa6f35cbc30261519"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H20dZHw7GyWqUPpopC/6DdKlRsTuG6Mn8UxaoX4PQwXaxGutp+Y1U4Q+p6 /qgu8BTbgnBWAwn3ydjok3uduJQPWQmK5y++GGh9P/4UAax2UqeFu0mqIHi4aXWro5Se9AB0ArtefP m2f3GOLLO6MSkAUMDB+P58he5MZQ1vRq63XB5WwArji9WLXwjX0JMvFuow== Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] create IEs for Vulnerability Assessment Scenario information needs (#43) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Apr 2017 15:21:18 -0000 ----==_mimepart_59020c28622e5_61cb3fa6f35cbc30261519 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit o Collection date/time - see collectionTimestamp. o Endpoint type - see endpointType. o Hardware version/firmware - see softwareInstance. o Operating system - see softwareInstance. o Operating system attributes - see softwareInstance. o Installed software name - see softwareInstance. o Installed software attributes - see softwareInstance. Install path should be covered by (https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76). o Open ports/enabled services - see portInfo, inetd, internetService, etc. o Operating system optional component inventory - see softwareInstance class other and applicationComponent. o Location - see locationName, networkZoneLocation, layer2NetworkLocation, layer3NetworkLocation, WGS84Longitude, WGS84Latitude. o Purpose - see endpointPurpose. o Criticality - see endpointCriticality. o File system attributes - see file. o Shared libraries - see applicationComponent. Should also be addressed by Install path should be covered by (https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76). o Other software configuration information - see registryKey and other OVAL-based IEs. o Ingest Date - see ingestTimestamp. o Date of Release - see publicationTimestamp. o Version - see vulnerabilityVersion. o External vuln ID - see vulnerabilityExternalId. o Severity Score - see vulnerabilitySeverity. o Date of assessment - see assessmentTimestamp. o Date of data collection - see collectionTimestamp. o Endpoint identification and/or locally assigned ID - see targetEndpointIdentifier and targetEndpointLabel. o Vulnerable software product(s) - see vulnerableSoftware. o Endpoint vulnerability status - see endpointVulnerabilityStatus. o Vulnerability description - see vulnerabilityDescription. o Vulnerability remediation - may be part of vulnerabilityDescription. Also, see patchId and patchName. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/43#issuecomment-297746680 ----==_mimepart_59020c28622e5_61cb3fa6f35cbc30261519 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

o Collection date/time - see collectionTimestamp.
o Endpoint type - see endpointType.
o Hardware version/firmware - see softwareInstance.
o Operating system - see softwareInstance.
o Operating system attributes - see softwareInstance.
o Installed software name - see softwareInstance.
o Installed software attributes - see softwareInstance. Install path should= be covered by (#76).
o Open ports/enabled services - see portInfo, inetd, internetService, etc.<= br> o Operating system optional component inventory - see softwareInstance clas= s other and applicationComponent.
o Location - see locationName, networkZoneLocation, layer2NetworkLocation, = layer3NetworkLocation, WGS84Longitude, WGS84Latitude.
o Purpose - see endpointPurpose.
o Criticality - see endpointCriticality.
o File system attributes - see file.
o Shared libraries - see applicationComponent. Should also be addressed by = Install path should be covered by (#76).
o Other software configuration information - see registryKey and other OVAL= -based IEs.
o Ingest Date - see ingestTimestamp.
o Date of Release - see publicationTimestamp.
o Version - see vulnerabilityVersion.
o External vuln ID - see vulnerabilityExternalId.
o Severity Score - see vulnerabilitySeverity.
o Date of assessment - see assessmentTimestamp.
o Date of data collection - see collectionTimestamp.
o Endpoint identification and/or locally assigned ID - see targetEndpointId= entifier and targetEndpointLabel.
o Vulnerable software product(s) - see vulnerableSoftware.
o Endpoint vulnerability status - see endpointVulnerabilityStatus.
o Vulnerability description - see vulnerabilityDescription.
o Vulnerability remediation - may be part of vulnerabilityDescription. Also= , see patchId and patchName.

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_59020c28622e5_61cb3fa6f35cbc30261519-- From nobody Fri Apr 28 00:32:50 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CE8B12951F for ; Fri, 28 Apr 2017 00:32:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PfCt1FrcYH_Y for ; Fri, 28 Apr 2017 00:32:48 -0700 (PDT) Received: from o7.sgmail.github.com (o7.sgmail.github.com [167.89.101.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF8F3129BF9 for ; Fri, 28 Apr 2017 00:29:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=hv+OVN78yrUqMiywkKRLOtr09Nk=; b=ke2HKm5CHXfU1VmQ BzhwAwZ4rYBdnrZ5jhf17yoiOC/RK6OxZ90LogaWZ1w/NWYqgXoNvMTZnA6vKjck 0OP43vpefe40ldhY4z0DrEUkvsKu4GXkwK8PhK+VP6FYtUVoYKYdsSY2wcfdIx9O IWKmh4SwMDfj4UyaPAiiqb8Olvw= Received: by filter0991p1mdw1.sendgrid.net with SMTP id filter0991p1mdw1-19267-5902EF70-3D 2017-04-28 07:29:52.88399433 +0000 UTC Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2b-ext-cp1-prd.iad.github.net [192.30.253.17]) by ismtpd0001p1iad1.sendgrid.net (SG) with ESMTP id 8jAFQfLHSY2vA6xVYNjblg for ; Fri, 28 Apr 2017 07:29:52.992 +0000 (UTC) Date: Fri, 28 Apr 2017 00:29:52 -0700 From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5902ef70dd8d3_1e393fcf15eedc384381a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org X-SG-EID: UtArl2HfP/Y+1oZ8SNY9H2/wL8Bw3jPjT0hekytArJxBeketKUTusDBRHwwdFu13Tkv5O0r5QRGmal 1fvl2aduBMcbf8eYgOCPLPZ1iNZvqNf5+1UNBq7Jo9yoLqSUva1yrY9oiC2E18hTYde5QJ8xRj+LxC hxo0l+QWdAejt1yUeRd4XPm6Xx7hdqpS8jkNttFSKPiM7LTpD7Xlwhml9wYFoMlOamjDr7USev3wz1 s= Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] softwareClass does not support softwareDependencies (#76) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 07:32:50 -0000 ----==_mimepart_5902ef70dd8d3_1e393fcf15eedc384381a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Your "library" approach is an option yes, and this will allow covering more use cases than currently, so yes. Reminder however of the importance of the attributes version/epoch/hash e.g. http://lists.cisecurity.org/pipermail/oval_developer_lists.cisecurity.org/Week-of-Mon-20170417/000222.html In the future we would have to cover another one which is for software of type website (e.g. web admin interface of a device (so not really a firmware), and web applications (not really server/desktop softwares) where the -software's components/dependencies- (quite equivalent to "libraries" from a model point of view) are: software artifacts (understand source code/files like web pages (e.g. .php, .aspx pages, JavaScript, or .py, .rb, etc.) To cover all of this, a softwareComponent class would be more generic (from a model and semantic point of view), where a softwareComponent/Dependency could be a library or an artifact (so basically a file), which validates basically your filepath IE approach -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/76#issuecomment-297928614 ----==_mimepart_5902ef70dd8d3_1e393fcf15eedc384381a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Your "library" approach is an option yes, and this will allow covering m= ore use cases than currently, so yes.

Reminder however of the importance of the attributes version/epoch/hash<= br> e.g. http://lists.cisecurity.or= g/pipermail/oval_developer_lists.cisecurity.org/Week-of-Mon-20170417/000222= .html

In the future we would have to cover another one which is for software o= f type website (e.g. web admin interface of a device (so not really a firmw= are), and web applications (not really server/desktop softwares) where the = -software's components/dependencies- (quite equivalent to "libraries" from = a model point of view) are: software artifacts (understand source code/file= s like web pages (e.g. .php, .aspx pages, JavaScript, or .py, .rb, etc.)

To cover all of this, a softwareComponent class would be more generic (f= rom a model and semantic point of view), where a softwareComponent/Dependen= cy could be a library or an artifact (so basically a file), which validates= basically your filepath IE approach

&mda= sh;
You are receiving this because you are subscribed to this thread.<= br />Reply to this email directly, view it on= GitHub, or mute the thread= .3D""

= ----==_mimepart_5902ef70dd8d3_1e393fcf15eedc384381a-- From nobody Fri Apr 28 00:48:19 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F262812778E for ; Fri, 28 Apr 2017 00:48:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.182 X-Spam-Level: X-Spam-Status: No, score=-8.182 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQpLv8PShSCG for ; Fri, 28 Apr 2017 00:48:15 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CB8A12E3AE for ; Fri, 28 Apr 2017 00:45:03 -0700 (PDT) Date: Fri, 28 Apr 2017 00:45:02 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1493365502; bh=SDT+4CIBQZlJYLUwLg1DLHsfMxgZ6QCghFK+nXvDD0w=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=DX3CfMPXRQKyJKpSgOmWGCYdYIObeJptNj7qXH0iFl7576q8KNfMWC1zN5JIQqW9q F3fEhPL05XSbH19tDLii3RvHwHk0vfTETbiAV/ZjGvrbGLbWFlEysP+dFM9yE81zWp RKWR98xGmizTaVPbjyk9thg9JkVVlN156p2TOr40= From: Jerome Athias Reply-To: sacmwg/draft-ietf-sacm-information-model To: sacmwg/draft-ietf-sacm-information-model Cc: Subscribed Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5902f2fe983d4_36f03fea6ed45c2c168823"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-GitHub-Reason: subscribed X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] create IEs for Vulnerability Assessment Scenario information needs (#43) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 07:48:17 -0000 ----==_mimepart_5902f2fe983d4_36f03fea6ed45c2c168823 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Note for the future Warning regarding "Date of assessment - see assessmentTimestamp.", we would have to support/record information related to the assessment, in particular the - Profile - (important in compliance context) -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/43#issuecomment-297931407 ----==_mimepart_5902f2fe983d4_36f03fea6ed45c2c168823 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Note for the future
Warning regarding "Date of assessment - see assessmentTimestamp.", we wou= ld have to support/record information related to the assessment, in parti= cular the - Profile - (important in compliance context)

&m= dash;
You are receiving this because you are subscribed to this thre= ad.
Reply to this email directly, vi= ew it on GitHub, or mute th= e thread.3D""

= ----==_mimepart_5902f2fe983d4_36f03fea6ed45c2c168823-- From nobody Fri Apr 28 09:53:49 2017 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C1961294A1 for ; Fri, 28 Apr 2017 09:53:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BpM0C5ecTCFt for ; Fri, 28 Apr 2017 09:53:46 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 19B4812EABD for ; Fri, 28 Apr 2017 09:50:14 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 091716C0261 for ; Fri, 28 Apr 2017 12:50:25 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id EDF936C02F6 for ; Fri, 28 Apr 2017 12:50:24 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Fri, 28 Apr 2017 12:50:13 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Fri, 28 Apr 2017 12:50:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=89G9ttTpSiHmwPBER40iaomd9r1is0uyQ9kjrBcQOoQ=; b=wBw0lNLCG0dxB5ObSFnn6RsVgn1IZV7Z/cX3Lx1RPK0QwjIDK7aGP09F0TgsGCWSEKdfDYDOUACY+CAD1R2FuGZUEnOOoxsQHKHSlFFa3BMVESpABitD+A1k2eaT2gv1oFzbuzpeC5vGIeoYoR87Vsb0VW9canfXAD1d+8OYv34= Received: from MWHPR09MB1376.namprd09.prod.outlook.com (10.172.51.14) by MWHPR09MB1374.namprd09.prod.outlook.com (10.172.51.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.13; Fri, 28 Apr 2017 16:50:06 +0000 Received: from MWHPR09MB1376.namprd09.prod.outlook.com ([10.172.51.14]) by MWHPR09MB1376.namprd09.prod.outlook.com ([10.172.51.14]) with mapi id 15.01.1047.021; Fri, 28 Apr 2017 16:50:06 +0000 From: "Morse, Dave" To: "sacm@ietf.org" Thread-Topic: public comment period open - SWID Tag Signing Guidelines - TagVault.org Thread-Index: AdLAPyRZgQah2JOCS9i7+SMWScNklg== Date: Fri, 28 Apr 2017 16:50:06 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.80.55.86] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR09MB1374; 7:RA4VFPgN9eeXSWXJv4R068nOmT97xDFTmN6napTnUCP8xTdwV4GKeAocwRmVP8efFpJ0u2bFoiXorWVjWMFLsWs4i73EuRPZZ3OQsAa1W2paIhJs85omqj7wa0c3rGnViNY+5VlwRdy1YJNjnjczp6AVKYe6Hfb92nmUvpYw7/mQxcyK40w0sGOV2Av63+v2VGT8zi6O3xaEL5s9u9po4PPkdFNhuZbHWQIawW2AywNMdN1bJLxIhpuzEeKXl2pnCsPXdw8ni5YhC+2LhMlg/ujshDk9AAX6qkdE52Mlh49WBpCIeKZ6Q80rpDAIcvFvq2fq552FnfLV10rGHaWC9A== x-ms-office365-filtering-correlation-id: 3a2346d8-09ce-41e1-c9ee-08d48e569ff4 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:MWHPR09MB1374; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(209352067349851)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041248)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(20161123562025)(20161123560025)(6072148); SRVR:MWHPR09MB1374; BCL:0; PCL:0; RULEID:; SRVR:MWHPR09MB1374; x-forefront-prvs: 029174C036 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(39400400002)(39840400002)(39410400002)(39850400002)(39450400003)(110136004)(7696004)(66066001)(77096006)(7736002)(74316002)(50986999)(54356999)(33656002)(38730400002)(7906003)(2351001)(5660300001)(6506006)(25786009)(6436002)(6916009)(2900100001)(606005)(54896002)(9686003)(236005)(6306002)(99286003)(5640700003)(55016002)(53936002)(1730700003)(6116002)(8936002)(122556002)(8676002)(81166006)(3280700002)(102836003)(5630700001)(2906002)(3846002)(790700001)(3660700001)(189998001)(86362001)(2501003); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR09MB1374; H:MWHPR09MB1376.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_MWHPR09MB13768A7C9D208304C27BB875CB130MWHPR09MB1376namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Apr 2017 16:50:06.5371 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1374 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] public comment period open - SWID Tag Signing Guidelines - TagVault.org X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 16:53:48 -0000 --_000_MWHPR09MB13768A7C9D208304C27BB875CB130MWHPR09MB1376namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A new SWID Tag Signing Guidelines document is available for public comment: https://tagvault.org/2017/04/26/swid-tag-signing-guidelines-open-for-public= -review/ The guidelines provide additional direction in support of existing standard= s and are intended to assist producers, implementers and end users of digit= ally signed SWID tags. The TagVault.org Tag Signing Working Group (TSWG) i= s very interested in receiving feedback from the stakeholder community. The public review opens on April 26, 2017, and will remain open until June = 25, 2017. Comments may be submitted online via the TagVault.org page liste= d above, or via PDF as described on that same page. David L. Morse -The MITRE Corporation -TSWG Chair, TagVault.org (DHS Rep.) --_000_MWHPR09MB13768A7C9D208304C27BB875CB130MWHPR09MB1376namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

= A new SWID Tag Signing Guidelines document is available for public comment:=

=  

= https://tagvault.org/2017/04/26/swid-tag-signing-guide= lines-open-for-public-review/

=  

= The guidelines provide additional direction in support of existing standard= s and are intended to assist producers, implementers and end users of digit= ally signed SWID tags.  The TagVault.org Tag Signing Working Group (TSWG) is very interested in receiving feedback from the sta= keholder community.

=  

= The public review opens on April 26, 2017, and will remain open until June = 25, 2017.  Comments may be submitted online via the TagVault.org page = listed above, or via PDF as described on that same page.

=  

David L. Morse

-The MITRE Corporation

-TSWG Chair, TagVault.org (DHS Rep.)

--_000_MWHPR09MB13768A7C9D208304C27BB875CB130MWHPR09MB1376namp_--