Intrusion Detection Message Exchange Requirements, March 2007
- Canonical URL:
- File formats:
- M. Wood
- idwg (sec)
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
The purpose of the Intrusion Detection Exchange Format Working Group (IDWG) is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems and to the management systems that may need to interact with them. This document describes the high-level requirements for such a communication mechanism, including the rationale for those requirements where clarification is needed. Scenarios are used to illustrate some requirements. This memo provides information for the Internet community.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 4844.