subclassOf

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

subclassOf

Peter Czanik
Hello,

I already asked it a while ago from Anton, but I was told, that this is not yet decided. When there is a subclass relationship among tags (like
"acct"-"admin"), is it enough to include the one with the narrower scope ("admin") among the tags or both are needed?
 
                        <Tag name="acct" type="object">
                                <Description>A user, service, administrator, or other account on a system</Description>
                        </Tag>
                        <Tag name="admin" type="object">
                                <Description>Administration Account</Description>
                                <Relations>
                                        <Relation type="subclassOf">acct</Relation>
                                </Relations>
                        </Tag>

Bye,
-- 
Peter Czanik (CzP) [hidden email]
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/
Reply | Threaded
Open this post in threaded view
|

Re: subclassOf

Adam Montville

I don’t know the answer, but it would be ideal if we didn’t need to know anything else about ‘admin’ to understand that it is an ‘acct’. 

 

From: Peter Czanik [mailto:[hidden email]]
Sent: Tuesday, November 23, 2010 7:13 AM
To: [hidden email]
Subject: [CEE-DISCUSSION-LIST] subclassOf

 

Hello,

I already asked it a while ago from Anton, but I was told, that this is not yet decided. When there is a subclass relationship among tags (like "acct"-"admin"), is it enough to include the one with the narrower scope ("admin") among the tags or both are needed?
 
                        <Tag name="acct" type="object">
                                <Description>A user, service, administrator, or other account on a system</Description>
                        </Tag>
                        <Tag name="admin" type="object">
                                <Description>Administration Account</Description>
                                <Relations>
                                        <Relation type="subclassOf">acct</Relation>
                                </Relations>
                        </Tag>

Bye,

-- 
Peter Czanik (CzP) [hidden email]
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/
Reply | Threaded
Open this post in threaded view
|

Re: subclassOf

heinbockel
The goal is to have the field and tag identifiers be unique within the context
of CEE, so that every time the tag 'admin' appears it is always a type of user
account

As for subclassing and other relations, these properties are not intended to be
transitive or symmetric.

For the "subclassOf", the specification of "admin" --subclassOf--> "acct" is
enough to infer that the "acct" is a superclass of "admin". It provides us more
extensibility to only have to specify the child->parent relation as we can more
easily add child nodes to a parent without having to modify the parent
definition.

This is also true for "equivalentTo". We can say that "logon" --equivalentTo-->
"login", meaning that logon describes an identical concept to that of login.
However, strictly speaking, this does not mean the reverse, that "login"
--equivalentTo--> "logon".

William Heinbockel
The MITRE Corporation


>-----Original Message-----
>From: Adam Montville [mailto:[hidden email]]
>Sent: Tuesday, 23 November 2010 11:59
>To: cee-discussion-list CEE-Related Discussion
>Subject: Re: [CEE-DISCUSSION-LIST] subclassOf
>
>I don't know the answer, but it would be ideal if we didn't need to know
>anything else about 'admin' to understand that it is an 'acct'.
>
>
>
>From: Peter Czanik [mailto:[hidden email]]
>Sent: Tuesday, November 23, 2010 7:13 AM
>To: [hidden email]
>Subject: [CEE-DISCUSSION-LIST] subclassOf
>
>
>
>Hello,
>
>I already asked it a while ago from Anton, but I was told, that this is not
>yet decided. When there is a subclass relationship among tags (like "acct"-
>"admin"), is it enough to include the one with the narrower scope ("admin")
>among the tags or both are needed?
>
>                        <Tag name="acct" type="object">
>                                <Description>A user, service, administrator,
>or other account on a system</Description>
>                        </Tag>
>                        <Tag name="admin" type="object">
>                                <Description>Administration
>Account</Description>
>                                <Relations>
>                                        <Relation
>type="subclassOf">acct</Relation>
>                                </Relations>
>                        </Tag>
>
>Bye,
>
>
>
>--
>Peter Czanik (CzP) <[hidden email]> <mailto:[hidden email]>
>BalaBit IT Security / syslog-ng upstream
>http://czanik.blogs.balabit.com/

smime.p7s (4K) Download Attachment