search

ucoProject / UCO

This repository is for development of the Unified Cyber Ontology.
Apache License 2.0
80 stars 34 forks source link

Network connections in PCAP files #53

Open vikhari opened 6 years ago

vikhari commented 6 years ago

See the attached PDF below for details on the proposal, and then vote on the subsequent 2 comments with a thumbs up or thumbs down (click on the emoji icon in the top right of the post).

Representing Network Connections using CASE UCO 4April2018.pdf

vikhari commented 6 years ago

ISSUE FOR VOTE [Deadline: 5/30/18]

Add two new properties are proposed to represent the state of a network connection: overallState and connectionState.

vikhari commented 6 years ago

ISSUE FOR VOTE [Deadline: 5/30/18]

Use a Relationship (StarttimeRelation) to link network connections with captured network traffic (e.g., PCAP file).