Proposal: Change File Object Accessed_Time and Modified Time Fields To DateTimeObjectPropertyType

Status: Unreleased
Comment Period Closes: TBD
Affects Backwards Compatibility: YES
Relevant Issue: https://github.com/CybOXProject/schemas/issues/101

Background Information

In CybOX 2.0.1, the Accessed_Time and Modified_Time fields found within the FileObjectType are of of type, cyboxCommon:StringObjectPropertyType. Because these times represent date and time information, they should use the DateTimeObjectPropertyType datatype defined with the CybOX common schema.

Proposal

We propose changing the datatype of the Accessed_Time and Modified_Time fields within the FileObjectType to cyboxCommon:DateTimeObjectPropertyType. The following XML schema changes will be made to the FileObjectType:

<xs:element name="Accessed_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
    ...
</xs:element>

<xs:element name="Modified_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
   ...
</xs:element>

Impact

Existing CybOX 2.0.1 content which utilizes the Accessed_Time and Modified_Time fields and DOES NOT express those field values with an XML Schema xs:dateTime or ISO8601 compliant value will be rendered schema-invalid when validated against these changes.

Because these values represent timestamp information, it is felt that the data should be expressed in a manner that is consistent with other CybOX timestamp fields.

Requested Feedback

1. Are CybOX authors and consumers comfortable with changing the datatype to DateTimeObjectPropertyType, thus potentially breaking backwards compatibility?