OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Secu

 View Only
  • 1.  Workflow Steps

    Posted 11-02-2024 06:11
    All,

    Over the past many many months we have been discussing various aspects with workflow steps. We have made some great progress on understanding the issues that Luca has brought forth. I believe we have also achieved some consensus on what those changes will mean. 

    In reading over the current section 4, as I tried to implement these changes I noticed that to do so, and make things clear, would represent a lot of churn in the document. As such, I started a new temporary document [1] that just has the new rewritten sections from section 4. 

    I still need to do the common properties and the two action steps. Major things to note:

    1. Most of the conditional logic steps do NOT have an on_completion, on_success, or on_failure anymore. In thinking through things, those properties just do not make sense on those objects.

    2. The while loop now has a new property called on_false to handle that condition of when the on_true fails. 

    3. I am thinking that when I do the common properties, I will remove the on_timeout stuff and put that ONLY on the action steps themselves, NOT on the conditional logic and parallel steps. Once again, because it does not make sense there. But if someone can give some concrete examples and use cases, I could be convinced otherwise. But I really think that they should not be on those objects. 

    4. I have cleaned up and somewhat rewrote all of the descriptions to hopefully make things more clear. I also moved some of the text that was in the property tables up into the object description as I felt like some of it was in the wrong place and did not make sense where we had it.

    5. I tried to add some graphical examples of what these various object would look like to help illustrate how they could be used.  

    Things I still need to do:
    a. Move over the common properties and clean them up
    b. Move over the Action Step and Playbook Action step and clean them up
    c. See about defining what these objects SHOULD look like graphically, we had talked about this 6 months ago and agreed to do it, I just have not yet had time. Once we do that, I will update the graphics so they use the correct images.

    Please review.

    Thanks
    Bret