Common Event Expression: CEE Working Group

CEE has established a CEE Working Group to document and prioritize use cases for CEE. When decisions must be made for any standard, we must rely on the feedback from the supporting community and the motivating use cases. For CEE, we have a healthy and continuously expanding community, but need to begin deciding which use cases CEE will and will not support.

Objectives

The expected outcome from this Working Group is a prioritized listing of detailed use cases divided into three categories:

Use Cases CEE must support
Use Cases CEE may support
Use Cases CEE will not support

The use cases should at least cover the ways in which logs are currently used (security audits, SIM correlation, compliance mandates), but may provide some insight into potential future uses.

Organization and Process

Working Groups are created to investigate and draft one or more documents on a certain topic. While MITRE will provide a mailing list for each discussion group to use, it is up to the groups to determine how best to operate.

Each Working Group is responsible for choosing a Lead. The Lead will be responsible for keeping the Working Group on task and reporting its status to the CEE Editorial Board at least on a quarterly basis.

Once the Working Group has created a stable document, a draft version will be made available for public comment. During this period everybody is welcome to review the draft and submit comments to the Working Group. The Working Group will review all comments, make any necessary revisions, and post the updated draft for another round of public comment. At least two (2) drafts must be posted for public review before the document can be submitted to the CEE Editorial Board. It is ultimately up to the CEE Editorial Board to decide when a draft document has reached a point of community consensus, at which point the document will be considered to be a final version.

Once a final document has been produced, any updates must be approved by the CEE Editorial Board. In a case where major changes need to be made, the Working Group will be reestablished to recommend the necessary updates.

Join Today!

If you are interested in becoming a part of this Working Group, please subscribe to the "Use Case Working Group Email List." All use case and Working Group-related discussions will be held on this mailing list to minimize the traffic volumes on the other mailing lists.

To subscribe, open a new email message and copy the following text to the BODY of the message "SUBSCRIBE CEE-WORKING GROUP-USECASE-List", then send the message to: listserv@lists.mitre.org.

NOTE: The CEE Team will be moderating the registration requests to this list and will only approve subscriptions for those email addresses previously subscribed to the CEE Community Discussion or CEE Announce mailing lists.

Page Last Updated: October 1, 2008