IODEF WG  Incident Object Description and Exchange Format Working Group

IODEF WG is established under the auspice of  TF-CSIRT and conducts its activity according to the IODEF WG Charter.

IODEF Working Group is currently closed. Further IODEF development is transferred to IETF INCH WG (see for submitted documents there). INCH WG mailing list - inch@nic.surfnet.nl (to subscribe send the message). Maiiling List Archive: http://listserv.surfnet.nl/archives/inch.html

IODEF WG Meetings

•  IODEF WG meeting - January 23, 2002, Stockholm, Sweden
• Minutes of the meeting
• 1st IODEF WG meeting - 26-27 September, 2001, Manchester, UK
• Minutes of the meeting
• Previous meetings and discussions in the frame of TF-CSIRT Seminars (for information see Seminar materials and  IODEF related presentations)

IODEF WG Documents

• Best Current Practice on Incident classification and reporting schemes. Version 1.0.
• Taxonomy of the Computer Security Incident related terminology
• RFC 3067 TERENA's Incident Object Description and Exchange Format Requirements  - February 2001 - Local copy
• Relations between the IODEF Incident handling systems and IDMEF developed by IETF IDWG - Request for comments to IDWG and ITD/IODEF WG - March 2001
• Incident Object Description and Exchange Format  Data Model and Extensible Markup Language (XML)  Document Type Definition (IODEF WG Version 0.05 Final) - February 2002
• Incident Object XML Data Type Definition (XML DTD). IODEF WG Version 0.05 Final -TEXT format - February 2002
• Incident Object Data Model Chart (IODEF WG Version 0.05 Final) - February 2002
• The Incident Example Set. Draft 1.0 (local, at SURFnet)

Related Projects and developments

• TERENA Pilot Project Proposal on Pilot implementation of the IODEF based Incident Handling - approved by TTC on May 14, 2001
• IODEF pilot implementation: Design ideas - Presentation by Jan Meijer at TF-CSIRT Seminar May 31, 2001, Ljubljana
• IODEF and Incident Handling (early IODEF adoption in Scandinavia) - Presentation by Jimmy Arvidsson at TF-CSIRT Seminar May 31, 2001, Ljubljana
• IRT object in RIPE NCC database (approved at RIPE Database WG meeting at RIPE40)
• IETF Intrusion Detection and Description Working Group - Concluded at IETF52
• Open source implementation of IDMEF standard by Silicon Defense
• IDMEF Data Model and XML Document Type Definition - Final draft version IDMEF-06

- Local copy
• Automated Incident Reporting-CERT (AirCERT) Project at CERT/CC as a component of the CERT Knowledgebase designed to receive and process automatically reported Internet security event information
• Extended Incident Handling BoF (INCH BoF) at IETF52
• Draft minutes
• INCH WG Draft Charter

Presentations and other documents

• IODEF Data Model and XML Document Type Definition, Pre-draft version 0.03 - IODEF Working Group meetings - Wednesday January 23, 2002
• Relations between IODEF and IDMEF based on IDMEF XML DTD and Data Model Analysis - IDWG meeting at IETF50, Minneapolis - March 21, 2001.
• Taxonomy of IODEF related Terminology by Jimmy Arvidsson - 2nd TF-CSIRT, Barcelona. - January 18, 2001.
• TF-CSIRT Incident Taxonomy and Description WG work process by Yuri Demchenko - 2nd TF-CSIRT, Barcelona. - January 18, 2001.
• Incident Object Description and Exchange Format by J.Arvidsson, A.Cormack , Y.Demchenko, J.Meijer - IDWG meeting at IETF49, San Diego. - December 14, 2000.
• Incident Object Description and Exchange Format by J.Arvidsson, A.Cormack , Y.Demchenko, J.Meijer - 1st TF-CSIRT, Paris. - September 28, 2000.

Mailing Lists:

Mailing list iodef@terena.nl is closed
Mailing List Archive: http://hypermail.terena.nl/iodef-list/mail-archive/
 

| Home | Information | Conferences | Innovation | Technical | Library | News |