Re: CVE ID语法变化——第二轮投票选举(周三截止日期,2013年5月22日11:59 EDT)

McAfee投CVE ID语法变化

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

投票选举

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

第一选择:B

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

选项B:年+任意数字,没有领导除了id 0 1到999

例子:

cve cve - 2014 - 0001 - 2014 - 0999, cve - 2014 - 1234, cve - 2014 - 9999,

cve cve - 2014 - 10000 - 2014 - 54321, cve - 2014 - 99999,

cve cve - 2014 - 100000 - 2014 - 123456, cve - 2014 - 999999,

cve - 2014 - 1234567

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

原因(首选):

未来McAfee防是重要的。选择选项B作为我们的第一选择,为CVE提供按需扩展的能力。此外,该选项允许至少影响到现有的安全用户社区。客户熟悉现有的格式和新格式的变化将更容易解释和融入我们的产品。我们不希望看到自己在一个情况需要改变CVE格式再一次。

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

第二选择:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

选项:一年+ 8位数,与领先的0

例子:

cve - 2014 - 00000001, cve - 2014 - 00000999, cve - 2014 - 00001234,

cve - 2014 - 00009999, cve - 2014 - 00010000, cve - 2014 - 00123456,

cve - 2014 - 01234567, cve - 2014 - 12345678

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

原因(第二选择):

虽然这是一个认真的考虑,它并不提供未来打样我们的欲望。几乎没有讨论这个特定的选择关于填充前导零。如果有董事会可能能够更容易接受使用固定大小的ID。

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

肯特Landfield

McAfee |一个英特尔公司
直接:+ 1.972.963.7096
手机:+ 1.817.637.8026
网络:www.mcafee.com