Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 10
Abstract: The Incident Object Description Exchange Format (IODEF) is an XML data representation framework for sharing information about computer security incidents. In IODEF, the Reference class provides references to externally specified information such as a vulnerability, Intrusion Detection System (IDS) alert, malware sample, advisory, or attack technique. In practice, these references are based on external enumeration specifications that define both the enumeration format and the specific enumeration values, but the IODEF Reference class (as specified in IODEF v1 in RFC 5070) does not indicate how to include both of these important pieces of information. This document establishes a stand-alone data format to include both the external specification and specific enumeration identification value, and establishes an IANA registry to manage external enumeration specifications. While this document does not update IODEF v1, this enumeration reference format is used in IODEF v2 and is applicable to other formats that support this class of enumeration references.
Publication Date: 2015-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7495
Link: https://doi.org/10.17487/RFC7495
Author(s): Adam W. Montville
David L. Black
Keyword(s): IODEF, Incident Response

Latest version of IETF RFC 7495

Document Versions — IETF RFC 7495

▶ IETF RFC 7495 (2015-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3688 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 5070 [Superseded*]
IETF RFC 5226 [Superseded*]
IETF RFC 5234 [Active, Amended*]

Bibliographic Reference(s)

IETF.draft-ietf-mile-rfc5070-bis-11 — IODEFv2 EXTERNAL
The MITRE Corporation, "CVE - Common Vulnerabilities and Exposures", < http://cve.mitre.org >. EXTERNAL
The MITRE Corporation, "CPE - Common Platform Enumeration", website in "Archive" status, < http://cpe.mitre.org >. EXTERNAL
The MITRE Corporation, "Common Configuration Enumeration (CCE): Unique Identifiers for Common System Configuration Issues", website in "Archive" status, < http://cce.mitre.org >. EXTERNAL
IETF RFC 20 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7495.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7495, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF). Available at https://doi.org/10.17487/RFC7495

Snippet:

IETF RFC 7495, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF). Available at https://doi.org/10.17487/RFC7495

HTML (ISO 690 compliant)

Preview:

IETF RFC 7495, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF). Available at https://doi.org/10.17487/RFC7495

Snippet:

<span class="citation"><cite>IETF RFC 7495</cite>, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF). Available at <a href="https://doi.org/10.17487/RFC7495" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7495</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7495, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF)
doi: 10.17487/RFC7495
url: https://doi.org/10.17487/RFC7495

Snippet:

<li>
<cite id="bib-rfc7495">IETF RFC 7495</cite>, Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF)
<span class="doi">10.17487/RFC7495</span>
</li>

Referenced By

IETF RFC 7970 [Active*]