Introduction IPR Policy This Committee Specification is being developed under the Mode of the , the mode chosen when the Technical Committee was established. For information on whether any patents have been disclosed that may be essential to implementing this specification, and any offers of patent licensing terms, please refer to the Intellectual Property Rights section of the TC’s web page (). Organization of CSAF CVRF The specification is split into seven chapters. Terminology The key words NOT”, NOT”, “MUST”, “MUST “REQUIRED”, “SHALL”, “SHALL “SHOULD”, “SHOULD NOT”, and in this document are to be interpreted as described “RECOMMENDED”, “MAY”, “OPTIONAL” in []. Terms and Definitions For the purposes of this document, the following applies: Advisory as in ISO/IEC 29147 [] — Coordinator as in ISO/IEC [] — as in ISO/IEC 29147 [] Finder — Online Services as in ISO/IEC 29147 [] — Product as in ISO/IEC 29147 [] — Remediation as in ISO/IEC 29147 [] — Service as in ISO/IEC 29147 [] — Vendor as in ISO/IEC [] — Vulnerability as in ISO/IEC 29147 [] — as defined in section 2.2.1 Date Time Value — Positive Integer integer number > 0 (xs:positiveInteger) cf. [] — Cardinality Range minimal and maximal occurrence noted as mathematical closed — interval with the special symbol (∞) for infinity to indicate no upper limit. Enumeration Set a finite set of domain values (case-sensitive string literals) — implemented via enumerations on (xs:token) cf. [] Abbreviated CCE Common Configuration Enumeration — CSAF Common Security Advisory Framework — CPE Common Platform Enumeration [] — CSIRT Computer Security Incident Response Team — CVE Common Vulnerabilities and Exposures [] —
Introduction IPR Policy This Committee Specification is being developed under the Mode of the , the mode chosen when the Technical Committee was established. For information on whether any patents have been disclosed that may be essential to implementing this specification, and any offers of patent licensing terms, please refer to the Intellectual Property Rights section of the TC’s web page (). Organization of CSAF CVRF The specification is split into seven chapters. Terminology The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to be interpreted as described in []. Terms and Definitions For the purposes of this document, the following applies: Advisory — as in ISO/IEC 29147 [] Coordinator — as in ISO/IEC [] Finder — as in ISO/IEC 29147 [] Online Services — as in ISO/IEC 29147 [] Product — as in ISO/IEC 29147 [] Remediation — as in ISO/IEC 29147 [] Service — as in ISO/IEC 29147 [] Vendor — as in ISO/IEC [] Vulnerability — as in ISO/IEC 29147 [] Date Time Value — as defined in section 2.2.1 Positive Integer — integer number > 0 (xs:positiveInteger) cf. [] Cardinality Range — minimal and maximal occurrence noted as mathematical closed interval with the special symbol (∞) for infinity to indicate no upper limit. Enumeration Set — a finite set of domain values (case-sensitive string literals) implemented via enumerations on (xs:token) cf. [] Abbreviated CCE — Common Configuration Enumeration CSAF — Common Security Advisory Framework CPE — Common Platform Enumeration [] CSIRT — Computer Security Incident Response Team CVE — Common Vulnerabilities and Exposures []
csaf-cvrf-v1.2.docx