[IDMEF][Issue 8] Classification and ident

 From Krzysztof Zaraska:
Also, we would propose introducing the "id" field here, containing a
unique identifier for the vulnerability in given database, as we can 
see that "name" field is being rather used as a description, and, as 
such, doesn't have to be unique. Having the "id" field, the 
construction of the relevant URL is trivial (some combination of 
database's base URL and the identifier).

Hervé:
If I'm correct in what you suggest, the name field could still be your 
ID, particularly if it is made unique like issue 1 suggests. or are 
you thinking of an "ident" pointer like there is for analyzer ?

BTW, your argument can be reversed: it is as easy to do ID->URL as 
URL->ID. The URL is just bigger.

Hervé
-- 
Hervé Debar             <mailto:[email protected]>
Tel: +33 (0)2 31 75 92 61            GSM: +33 (0)6 74 09 09 66
France Télécom R&D                   Fax: +33 (0)2 31 75 93 13
42 rue des Coutures  (--)  BP 6243  (--)  F-14066 Caen Cedex 4