Next in thread →
Next in month →
Re: [cti] RE: Timestamps and Temporal Intervals
I would concur with Patrick that these things should be treated as separate issues and with Terry that the temporal interval issue should wait until after we finish with the absolute timestamp issue. On Jason’s response on some temporal windowing discussions that happened at the F2f around patterning I would suggest that temporal windowing for patterns and temporal windowing for actual concrete times may also be two different issues. I am not making a hard assertion at this time that they are but I think this question should be one of the first broached when we do actually pick up the temporal windowing issue. sean From: <> on behalf of Terry MacDonald <> Date: Monday, January 18, 2016 at 7:29 PM To: Patrick Maroney <>, "" <> Subject: [cti] RE: Timestamps and Temporal Intervals Hi Pat, Lets wait on temporal intervals until after the timestamps discussion is finished. Cheers Terry MacDonald Senior STIX Subject Matter Expert SOLTRA | An FS-ISAC and DTCC Company +61 (407) 203 206 | From: [mailto:] On Behalf Of Patrick Maroney Sent: Tuesday, 19 January 2016 4:04 AM To: Subject: [cti] Timestamps and Temporal Intervals I want to help drive closure on Timestamps and breach the topic of Temporal Intervals* for the next major version. I posit there are two distinct temporal aspects to the _expression_ of "things" and their relationships to other "things" in the CTI Domain. (1) Absolute: "Event x" happened at absolute Time "T1". (2) Relative Intervals: "Event x" happened "Relative To(Rn**)" "Event y" [at relative interval "Interval In"] **Where Rn = [Before, During, After, At_Start_Of, At_End_Of, ...] Therefore, we need to represent these temporal concepts in different forms (breaking the "One way to do Things" rule on the basis that these are two different "Things"). I believe we are very close to reaching consensus on Absolute Timestamps. I propose that we should specifically identify and treat Temporal Intervals as a separate requirement and topic for discussion somewhere in the Road Map. (IF there is consensus: perhaps as part of Relationships and/or Patterning???) * To set the framework for what is meant by "Temporal Intervals", and some approaches one can consider in their representation, I refer everyone to James Allen's seminal paper from 1983: http://cse.unl.edu/~choueiry/Documents/Allen-CACM1983.pdf Patrick Maroney Office: (856)983-0001 Cell: (609)841-5104 President Integrated Networking Technologies, Inc. PO Box 569 Marlton, NJ 08053
Next in thread →
Next in month →