IETF RFC 7203
[ACTIVE]
An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 28
- Abstract
- This document extends the Incident Object Description Exchange Format (IODEF) defined in RFC 5070 to exchange enriched cybersecurity information among security experts at organizations and facilitate their operations. It provides a well-defined pattern to consistently embed structured information, such as identifier- and XML-based information.
- Publication Date
- 2014-04-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC7203- Link
- https://doi.org/10.17487/RFC7203
- Author(s)
- Takeshi TakahashiKent LandfieldYouki Kadobayashi
- Keyword(s)
- Incident Response, Automation, Vulnerability, CSIRT
Latest version of IETF RFC 7203
Document Versions — IETF RFC 7203
-
▶ IETF RFC 7203 (2014-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- ICSG Malware Metadata Exchange Format Working Group, "Malware Metadata Exchange Format", IEEE Standards Association, November 2011, < http://grouper.ieee.org/groups/malware/malwg/Schema1.2/ >. EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 5070 [Superseded*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 6545 [Active*]
- IETF RFC 6546 [Active*]
- W3C XML 1 [Active]
- W3C XML Namespaces 1.0 [Active]
- W3C XML Schema P1 [Active]
- W3C XML Schema P2 [Active]
Bibliographic Reference(s)
- NIST.IR.7275 — XCCDF EXTERNAL
- NIST.IR.7435 — CVSS EXTERNAL
- NIST.IR.7502 — CCSS EXTERNAL
- NIST.IR.7692 — OCIL EXTERNAL
- NIST.SP.800-126r2 — SCAP EXTERNAL
- The MITRE Corporation, "Common Event Expression (CEE)", < http://cee.mitre.org/ >. EXTERNAL
- The MITRE Corporation, "Common Attack Pattern Enumeration and Classification (CAPEC)", < http://capec.mitre.org/ >. EXTERNAL
- The MITRE Corporation, "Common Weakness Scoring System (CWSS(TM))", < http://cwe.mitre.org/cwss/ >. EXTERNAL
- The MITRE Corporation, "Malware Attribute Enumeration and Characterization", < http://maec.mitre.org/ >. EXTERNAL
- ICASI, "The Common Vulnerability Reporting Framework (CVRF)", < http://www.icasi.org/cvrf >. EXTERNAL
- National Institute of Standards and Technology, "Common Platform Enumeration", June 2011, < http://scap.nist.gov/specifications/cpe/ >. EXTERNAL
- The MITRE Corporation, "Open Vulnerability and Assessment Language (OVAL)", < http://oval.mitre.org/ >. EXTERNAL
- The MITRE Corporation, "Common Vulnerabilities and Exposures (CVE)", < http://cve.mitre.org/ >. EXTERNAL
- EICAR - European Expert Group for IT-Security, "Anti-Malware Testfile", 2003, < http://www.eicar.org/86-0-Intended-use.html >. EXTERNAL
- Rissanen, E., "eXtensible Access Control Markup Language (XACML) Version 3.0", January 2013, < http://docs.oasis-open.org/xacml/3.0/ xacml-3.0-core-spec-os-en.pdf >. EXTERNAL
- The MITRE Corporation, "Common Weakness Enumeration (CWE)", < http://cwe.mitre.org/ >. EXTERNAL
- National Institute of Standards and Technology, "Common Configuration Enumeration (CCE)", < http://nvd.nist.gov/cce/index.cfm >. EXTERNAL
- IETF RFC 3553 [Active*]
- IETF RFC 3688 [Active*]
- W3C XML DSig Core [Superseded]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7203.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7203, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information. Available at https://doi.org/10.17487/RFC7203
Snippet:
IETF RFC 7203, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information. Available at https://doi.org/10.17487/RFC7203
HTML (ISO 690 compliant)
Preview:
IETF RFC 7203, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information. Available at https://doi.org/10.17487/RFC7203
Snippet:
<span class="citation"><cite>IETF RFC 7203</cite>, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information. Available at <a href="https://doi.org/10.17487/RFC7203" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7203</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7203, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information
doi: 10.17487/RFC7203
url: https://doi.org/10.17487/RFC7203
doi: 10.17487/RFC7203
url: https://doi.org/10.17487/RFC7203
Snippet:
<li> <cite id="bib-rfc7203">IETF RFC 7203</cite>, An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information <span class="doi">10.17487/RFC7203</span> </li>
Referenced By
- IETF RFC 7970 [Active*]