Add comparision with osquery

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>

diff --git a/README.md b/README.md
index c323eab023337f03c1760f17fcb32747309743f3..92ef2645a8eb4946609e18591e09eae691163b4b 100644 (file)
--- a/README.md
+++ b/README.md
@@ -53,16 +53,6 @@ guarantees to generate type-safe query.
 Refer [this](https://github.sec.samsung.net/RS7-SECIOTSW/tizen-osquery/tree/master/src/vist/query-builder)
 to compare ours and other opensources.
 
-# Difference with osquery
-Osquery views operating system as table 
-from the perspective of the system administrator. 
-It provides osqueryd(daemon), osqueryi(interactive shell).  
-
-We view operating system as table 
-from the perspective of the system programmar.  
-Our purpose is to provide them more compact and 
-more efficient interface from this different perspective.
-
 # ViST, Virtual Security Table
 ViST(Virtual Security Table) is a security monitoring framework using SQL query.
 - Provides APIs for monitoring and controlling security resources.

diff --git a/doc/comparision-with-osquery.md b/doc/comparision-with-osquery.md
new file mode 100644 (file)
index 0000000..3640313
--- /dev/null
+++ b/doc/comparision-with-osquery.md
@@ -0,0 +1,22 @@
+# Comparison with osquery
+Osquery views operating system as table 
+from the perspective of the system administrator. 
+It provides osqueryd(daemon), osqueryi(interactive shell).  
+
+We view operating system as table 
+from the perspective of the system programmar.  
+
+Our purpose is to provide them more compact and 
+more efficient interface from this different perspective.
+
+|   | ViST | [OsQuery](https://github.com/osquery/osquery) |
+|---|---|---|
+| perspective | system developer | system administrator |
+| component | daemon, **library** | daemon, shell |
+| **dependencies** | xxx | xxx |
+| **size** | xxx | xxx |
+| code line | xxx | xxx |
+| type | SAM | OPENM |
+
+## [What are the current pain points of osquery?](https://blog.trailofbits.com/2017/12/21/osquery-pain-points/)
+XXX

diff --git a/src/vist/query-builder/README.md b/src/vist/query-builder/README.md
index 0d370e29a010172a477b229144ba9bd4e9358297..5173a8ad95a43853e2db6d83a209b06f98cc7847 100644 (file)
--- a/src/vist/query-builder/README.md
+++ b/src/vist/query-builder/README.md
@@ -2,7 +2,7 @@
 Guarantee type safety by preventing type error 
 between sql query and sql schema at compile time.
 
-|   | ours | [sqlpp11](https://github.com/rbock/sqlpp11) | [sqlite_orm](https://github.com/fnc12/sqlite_orm) |
+|   | ViST | [sqlpp11](https://github.com/rbock/sqlpp11) | [sqlite_orm](https://github.com/fnc12/sqlite_orm) |
 |---|---|---|---|
 | **Tpye** | query builder | orm | orm |
 | **Language** | c++17 | c++11 ([WIP to c++17](https://github.com/rbock/sqlpp17)) | c++14 |