Relation between IDMEF and IODEF

1. IODEF should be compatible with IDMEF and be capable to use/include IDMEF message into IO



• Current IODEF implementation provides two options:
  • Use IncidentAlert class container to wrap up Alert/IDMEF
  • Decompose Alert/IDMEF message into Incident/IODEF classes

2. IODEF follows IDMEF development

• If some elements or attributes intersect, options should be considered:
  • change IODEF definition or ask IDWG to consider changing IDMEF definition
• Last IODEF pre-draft version 0.03 incorporated changes in IDMEF last call draft version 0.5

Previous slide

Next slide

Back to first slide

View graphic version