Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition

摘要

The purpose of the Intrusion Detection Message Exchange Format(IDMEF) is to define data formats and exchange procedures for sharinginformation of interest to intrusion detection and response systems,and to the management systems which may need to interact with them.The goals and requirements of the IDMEF are described in [3].This Internet-Draft describes a data model to represent informationexported by intrusion detection systems, and explains the rationalefor using this model. An implementation of the data model in theExtensible Markup Language (XML) is presented, an XML Document TypeDefinition is developed, and examples are provided.