The Incident Object Description Exchange Format Version 2

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 172
Abstract: The Incident Object Description Exchange Format (IODEF) defines a data representation for security incident reports and indicators commonly exchanged by operational security teams for mitigation and watch and warning. This document describes an updated information model for the IODEF and provides an associated data model specified with the XML schema. This new information and data model obsoletes RFCs 5070 and 6685.
Publication Date: 2016-11-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7970
Link: https://doi.org/10.17487/RFC7970
Author(s): Roman Danyliw
Keyword(s): Incident Data Format, Incident Report, Cyber Threat Indicators, CSIRT, Security Data Sharing, CNDSP, Information Sharing, Automated Information Sharing

Latest version of IETF RFC 7970

Document Versions — IETF RFC 7970

▶ IETF RFC 7970 (2016-11-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

10.1109-IEEESTD.2009.5393893 — IEEE.POSIX EXTERNAL
ISO.4217.2015 — ISO4217 EXTERNAL
ISO.19770-2.2015 — ISO19770 EXTERNAL
NIST.IR.7695 — NIST.CPE EXTERNAL
IANA, "Assigned Internet Protocol Numbers", < http://www.iana.org/assignments/protocol-numbers/ >. EXTERNAL
IANA, "Service Name and Transport Protocol Port Number Registry", < http://www.iana.org/assignments/ service-names-port-numbers/ >. EXTERNAL
IANA, "Media Types", < http://www.iana.org/assignments/media-types/ >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 2781 [Active*]
IETF RFC 3629 [Active*]
IETF RFC 3688 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4291 [Active*]
IETF RFC 4519 [Active*]
IETF RFC 5322 [Active, Amended*]
IETF RFC 5646 [Active*]
IETF RFC 5952 [Active*]
IETF RFC 6531 [Active*]
RFC7203 — RFC7203 EXTERNAL
RFC7495 — RFC7495 EXTERNAL
T-REC-E.164.2010 — ITU.E164.2010 EXTERNAL
W3C XML Namespaces 1.0 [Active]
W3C XML 1 [Active]
W3C XML DSig Core [Superseded]
W3C XML Schema P1 [Active]
W3C XML Schema P2 [Active]
W3C.xpath-3 — W3C.XPATH EXTERNAL

Bibliographic Reference(s)

NIST.SP.800-61r2 — NIST800.61rev2 EXTERNAL
Microsoft Corporation, "How to add, modify, or delete registry subkeys and values by using a .reg file", September 2013, < https://support.microsoft.com/en-us/kb/310516 >. EXTERNAL
IETF RFC 2818 [Superseded*]
IETF RFC 3982 [Active*]
RFC4180 — 20 EXTERNAL
IETF RFC 5070 [Superseded*]
IETF RFC 5226 [Superseded*]
IETF RFC 5246 [Superseded*]
RFC5901 — RFC5901 EXTERNAL
RFC6545 — RFC6545 EXTERNAL
RFC6546 — RFC6546 EXTERNAL
IETF RFC 6685 [Superseded*]
W3C.xmlenc-core1 — W3C.XMLENC EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7970.json

Supersedes:

IETF RFC 5070 [Superseded*]

IETF RFC 6685 [Superseded*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7970, The Incident Object Description Exchange Format Version 2. Available at https://doi.org/10.17487/RFC7970

Snippet:

IETF RFC 7970, The Incident Object Description Exchange Format Version 2. Available at https://doi.org/10.17487/RFC7970

HTML (ISO 690 compliant)

Preview:

IETF RFC 7970, The Incident Object Description Exchange Format Version 2. Available at https://doi.org/10.17487/RFC7970

Snippet:

<span class="citation"><cite>IETF RFC 7970</cite>, The Incident Object Description Exchange Format Version 2. Available at <a href="https://doi.org/10.17487/RFC7970" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7970</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7970, The Incident Object Description Exchange Format Version 2
doi: 10.17487/RFC7970
url: https://doi.org/10.17487/RFC7970

Snippet:

<li>
<cite id="bib-rfc7970">IETF RFC 7970</cite>, The Incident Object Description Exchange Format Version 2
<span class="doi">10.17487/RFC7970</span>
</li>