Profile

Contact Details

Ribbons

Badges

Mr. Troy Fridley


Contributions

1 to 5 of 5 total

FYI - Upcoming CVSS SIG Vote on Official JSON Format Attachments

Posted By Troy Fridley 03-06-2024 21:35
Found In Library: OASIS Common Security Advisory Framework (CSAF) TC

Re: [csaf] Generic Software Identification Parameter/Attribute to be included in CSAF 2.0 schema.

Posted By Troy Fridley 11-29-2018 17:59
Found In Egroup: OASIS Common Security Advisory Framework (CSAF) TC \ view thread
This is solved by having a secondary definition for Other, which requires the inclusion of things such as a human readable reference page and a JSON or XML Schema URI. Not JSON.. Product ID Vector: Type: [CPE SWID SPDX OTHER] ID String Version: Vendor Product Name: Version: Type Schema: Note: ...

Re: [csaf] Today's meeting cancelled?

Posted By Troy Fridley 03-28-2018 17:07
Found In Egroup: OASIS Common Security Advisory Framework (CSAF) TC \ view thread
The meeting is indeed on, https://cisco.webex.com/ciscosales/e.php?MTID=m2df76ff9858d27ae9aff7d7f0961841c Regards, -Troy -- Troy Fridley, CISSP Incident Manager, Cisco PSIRT Phone: 614-336-4385 E-Mail: troy.fridley@cisco.com PGP Key ID: 0x7B31ED20 ?On 3/28/18, 1:04 PM, "csaf@lists.oasis-open.org on behalf ...

FYI - Upcoming CVSS SIG Vote on Official JSON Format

Posted By Troy Fridley 04-25-2017 13:19
Found In Egroup: OASIS Common Security Advisory Framework (CSAF) TC \ view thread
This shouldn’t affect CVRF, but I figured this might be of interest to folks. The FIRST CVSS Sig is going to be voting to official adopt a documented JSON format for CVSS Scores. I Have attached the document that will be going up for a vote. Cheers, -Troy -- Troy Fridley, CISSP Incident Manager, Cisco ...

Re: [csaf] Groups - PDF - CSAF Common Vulnerability Reporting Framework (CVRF) Version 1.2 uploaded

Posted By Troy Fridley 03-13-2017 18:08
Found In Egroup: OASIS Common Security Advisory Framework (CSAF) TC \ view thread
Stefan, I was reviewing the document this morning and for the most part it looks pretty good. I think we can come up with some functional examples from published documents possible for those missing them. The one thing that jumped out at me that we need to fix is the updated schema for CVSS v3 Vector ...