|
Real-time Inter-network Defense
Used for computer security, IODEF (''Incident Object Description Exchange Format'') is a data format which is used to describe computer security information for the purpose of exchange between Computer Security Incident Response Teams ( CSIRTs). IODEF messages are organized in a human-readable way, and not a machine format. Details of the format are described in RFC 5070 and updated in RFC 6685. Version 2 of the format is defined in RFC 7970, which supersedes the previous version. This RFC presents an implementation of the data model in XML as well as the associated DTD. Further implementation guidance for IODEF v2 is defined in RFC 8274. One of the main characteristics of IODEF is its compatibility with the IDMEF ''Intrusion Detection Message Exchange Format'' developed for intrusion detection systems. For this reason, IODEF is heavily based on IDMEF and provides backward compatibility with it. Format IODEF is an object-oriented structured format, composed of 47 classes in ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
Computer Emergency Response Team
A computer emergency response team (CERT) is an expert group that handles computer security incidents. Alternative names for such groups include computer emergency readiness team and computer security incident response team (CSIRT). A more modern representation of the CSIRT acronym is Cyber Security Incident Response Team. History The name "Computer Emergency Response Team" was first used in 1988 by the CERT Coordination Center (CERT-CC) at Carnegie Mellon University (CMU). The term CERT is registered as a trade and service mark by CMU in multiple countries worldwide. CMU encourages the use of Computer Security Incident Response Team (CSIRT) as a generic term for the handling of computer security incidents. CMU licenses the CERT mark to various organizations that are performing the activities of a CSIRT. The history of CERT, and of CSIRTS, is linked to the existence of malware, especially computer worms and viruses. Whenever a new technology arrives, its misuse is not long in ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
IDMEF
Used as part of computer security, IDMEF (''Intrusion Detection Message Exchange Format'') is a data format used to exchange information between software enabling intrusion detection, intrusion prevention, security information collection and management systems that may need to interact with them. IDMEF messages are designed to be processed automatically. The details of the format are described in the RFC 4765. This RFC presents an implementation of the XML data model and the associated DTD. The requirements for this format are described in RFC 4766, and the recommended transport protocol (IDXP) is documented in RFC 4767 IDMEF The purpose of IDMEF is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems and to the management systems that may need to interact with them. It is used in computer security for incidents reporting and exchanging. It is intended for easy automatic processing. IDMEF is a well-structured ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
