-
Notifications
You must be signed in to change notification settings - Fork 17
Proposal: Change File Object Accessed_Time and Modified Time Fields To DateTimeObjectPropertyType
Status: Closed
Comment Period Closes: 12/17/2013
Affects Backwards Compatibility: YES
Relevant Issue: https://github.com/CybOXProject/schemas/issues/101
In CybOX 2.0.1, the Accessed_Time
and Modified_Time
fields found within the FileObjectType
are of of type, cyboxCommon:StringObjectPropertyType
. Because these times represent date and time information, they should use the DateTimeObjectPropertyType
datatype defined with the CybOX common schema.
We propose changing the datatype of the Accessed_Time
and Modified_Time
fields within the FileObjectType
to cyboxCommon:DateTimeObjectPropertyType
. CybOX uses the DateTimeObjectPropertyType
datatype when expressing timestamp information, so this proposal aligns the use of this datatype with conventions established by other CybOX timestamp fields.
The following XML schema changes will be made to the FileObjectType
:
<xs:element name="Accessed_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
...
</xs:element>
<xs:element name="Modified_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
...
</xs:element>
Existing CybOX 2.0.1 content which utilizes the Accessed_Time
and Modified_Time
fields and DOES NOT express those field values with an XML Schema xs:dateTime
or ISO8601
compliant value will be rendered schema-invalid when validated against these changes.
Because these values represent timestamp information, it is felt that the data should be expressed in a manner that is consistent with other CybOX timestamp fields.
- Are CybOX authors and consumers comfortable with changing the datatype to
DateTimeObjectPropertyType
, thus potentially breaking backwards compatibility?