draft-ietf-mile-enum-reference-format-08.txt   draft-ietf-mile-enum-reference-format-09.txt 
INTERNET-DRAFT Adam W. Montville INTERNET-DRAFT Adam W. Montville
Intended Status: Standards Track (Tripwire) Intended Status: Standards Track (Tripwire)
Updates: 5070 (if approved) David Black Updates: 5070 (if approved) David Black
Expires: March 10, 2015 (EMC) Expires: April 30, 2015 (EMC)
September 6, 2014 October 27, 2014
IODEF Enumeration Reference Format IODEF Enumeration Reference Format
draft-ietf-mile-enum-reference-format-08 draft-ietf-mile-enum-reference-format-09
Abstract Abstract
The Incident Object Description Exchange Format (IODEF) is an XML The Incident Object Description Exchange Format (IODEF) is an XML
data representation framework for sharing information about computer data representation framework for sharing information about computer
security incidents. In IODEF, the Reference class provides security incidents. In IODEF, the Reference class provides
references to externally specified information such as a references to externally specified information such as a
vulnerability, IDS alert, malware sample, advisory, or attack vulnerability, IDS alert, malware sample, advisory, or attack
technique. In practice, these references are based on external technique. In practice, these references are based on external
enumeration specifications that define both the enumeration format enumeration specifications that define both the enumeration format
skipping to change at page 6, line 50 skipping to change at page 6, line 50
related incident. As such, the reader is referred to the IODEF related incident. As such, the reader is referred to the IODEF
[IODEF] Security Considerations section, which explicitly covers [IODEF] Security Considerations section, which explicitly covers
protecting IODEF [IODEF] documents in transit and at rest, protecting IODEF [IODEF] documents in transit and at rest,
ensuring proper recipient authentication, data confidence levels, ensuring proper recipient authentication, data confidence levels,
underlying transport security characteristics, and proper use of underlying transport security characteristics, and proper use of
IODEF's restriction attribute. IODEF's restriction attribute.
4 IANA Considerations 4 IANA Considerations
This document specifies an identifier format for the IODEF [IODEF] This document specifies an identifier format for the IODEF [IODEF]
ReferenceName string of the Reference class. ReferenceName string of the Reference class. All fields,
including abbreviation, are mandatory.
This memo creates the following registry for IANA to manage: This memo creates the following registry for IANA to manage:
Name of the Registry: "Enumeration Reference Type Identifiers" Name of the Registry: "Enumeration Reference Type Identifiers"
Fields to record in the registry: Fields to record in the registry:
Full Name: The full name of the enumeration as a string from Full Name: The full name of the enumeration as a string from
the printable ASCII character set. the printable ASCII character set.
skipping to change at page 7, line 30 skipping to change at page 7, line 30
UC-ALPHA = %x41-5A ; A-Z UC-ALPHA = %x41-5A ; A-Z
Multiple registrations MAY use the same Abbreviation but Multiple registrations MAY use the same Abbreviation but
MUST have different Versions. MUST have different Versions.
SpecIndex: This is an IANA-assigned positive integer that SpecIndex: This is an IANA-assigned positive integer that
identifies the registration. The first entry added to this identifies the registration. The first entry added to this
registry uses the value 1, and this value is incremented for registry uses the value 1, and this value is incremented for
each subsequent entry added to the registry. each subsequent entry added to the registry.
Version: The version of the enumeration as a free-form string Version: The version of the enumeration (i.e. the referenced
from the printable ASCII character set excepting white space. specification) as a free-form string from the printable ASCII
character set excepting white space.
Specification URI: A list of one or more URIs [RFC3986] from Specification URI: A list of one or more URIs [RFC3986] from
which the registered specification can be obtained. The which the registered specification can be obtained. The
registered specification MUST be readily and publicly available registered specification MUST be readily and publicly available
from that URI. The URI SHOULD be a stable reference to a from that URI. The URI SHOULD be a stable reference to a
specific version of the specification. URIs that designate the specific version of the specification. URIs that designate the
latest version of a specification (which changes when a new latest version of a specification (which changes when a new
version appears) SHOULD NOT be used. version appears) SHOULD NOT be used.
Initial registry contents: None. Initial registry contents: None.
 End of changes. 5 change blocks. 
6 lines changed or deleted 8 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/