Re: The Security Vocabulary status

For something to be secure, it has to be readable under stress conditions.

Two tests:
1.  A non-technical person must be able to verify it without an authority.
2.  Similar to the nitrogen narcosis scuba test:  how fast can you do
simple math while under water?

Otherwise, the system is not secure.



On Fri, Jul 27, 2018 at 7:56 PM, Brent Shambaugh <brent.shambaugh@gmail.com>
wrote:

> For reference: An information Security Vocabuluary.
> https://github.com/twosixlabs/icas-ontology
>
> -Brent Shambaugh
>
> GitHub: https://github.com/bshambaugh
> Website: http://bshambaugh.org/
> LinkedIN: https://www.linkedin.com/in/brent-shambaugh-9b91259
> Skype: brent.shambaugh
> Twitter: https://twitter.com/Brent_Shambaugh
> WebID: http://bshambaugh.org/foaf.rdf#me
>
> On Wed, Jul 25, 2018 at 6:42 PM, Andrew Brown <andrewbb@gmail.com> wrote:
>
>> Thanks for explaining IT’s version of language.
>>
>> However, that is unacceptable.  Please choose words that are descriptive
>> and use a standard dictionary.
>>
>> Sent from my iPhone
>>
>> On 26 Jul BE 2561, at 6:00 AM, Ricardo Morin <morinricardo@gmail.com>
>> wrote:
>>
>> Hi Andrew:
>>
>> Yes, it probably needs some work.
>>
>> > 1.  'digest' is undefined.  Not a good choice of word.  Ambiguous.  Are
>> we eating something?
>> Actually in the context of cryptography this term is not ambiguous at all
>>
>> >2.  parentClass is an Owl?  Why is a bird referenced.  Choose another
>> word.
>> Owl is the Web Ontology Language standard. Again in the context of an
>> ontology it is widely used since it provides the foundation ontology from
>> which others derive.
>>
>> >3. The first class mentioned has an 'algorithm' and 'value'?  For
>> what?  What's the purpose?
>> The purpose is to generate a 'digest' -- for example SHA-256, and the
>> value is the computed 'digest' value. Nothing ambiguous about that either.
>>
>> >4.  The title seems ok, but why is 'The' used?
>> Yes, the The seems a bit presumptuous :)
>>
>> I hope someone from the Web Payments community can answer my questions
>> though.
>>
>> Thank you,
>>
>> Ricardo
>>
>>
>> On Wed, Jul 25, 2018 at 6:28 AM Andrew Bransford Brown <
>> andrewbb@gmail.com> wrote:
>>
>>> That certainly needs a lot of work.
>>>
>>> 1.  'digest' is undefined.  Not a good choice of word.  Ambiguous.  Are
>>> we eating something?
>>>
>>> 2.  parentClass is an Owl?  Why is a bird referenced.  Choose another
>>> word.
>>>
>>> 3.  The first class mentioned has an 'algorithm' and 'value'?  For
>>> what?  What's the purpose?  The class should be an abstract class or
>>> something that defines the entry point.  Or, a data structure that
>>> encapsulates the desired result.
>>>
>>> 4.  The title seems ok, but why is 'The' used?
>>>
>>>
>>> I don't want to 'digest' any more of the document.
>>>
>>>
>>> On Wed, Jul 25, 2018 at 8:34 AM, Ricardo Morin <morinricardo@gmail.com>
>>> wrote:
>>>
>>>> Hi Folks,
>>>>
>>>> I ran across The Security Vocabulary
>>>> <https://web-payments.org/specs/source/vocabs/security.html> and it
>>>> looks like is has been stale since 2016. I also could not find the rdf
>>>> representation of the vocabulary -- the link to
>>>> https://w3id.org/security# redirects to https://web-payments.org/vo
>>>> cabs/security# and there is no rdf+xml or ld+json content available.
>>>>
>>>> Could someone please give an update on this effort? If dead, can you
>>>> recommend a similar project that is actively being maintained?
>>>>
>>>> Thank you very much,
>>>>
>>>> Ricardo Morin
>>>>
>>>
>>>
>