IDMEF Data Model / XML DTD Changes and Updates

4/25/01


Click here to start


Table of Contents

IDMEF Data Model / XML DTD Changes and Updates

Internet Draft Status

Major Document Changes

Major Data Model / XML DTD Changes

New Model for <User> Class

New Model for <User> Class (cont’d)

New Date/Time Representation

New Date/Time Representation (cont’d)

New XML DTD Extension Method

New XML DTD Extension Method (cont’d)

New XML DTD Extension Method (cont’d)

New XML DTD Extension Method (cont’d)

Changes to the <Service> Class

Support for Isolated Networks and Multi-Interface Sensors

New Treatment of Unique Identifiers

Minor Changes

Outstanding Problems

Usage of “analyzerid” and “ident”

Usage of “analyzerid” and “ident” (cont’d)

Usage of “analyzerid” and “ident” (cont’d)

Adequacy of Uniqueness Rules

Questions

Author: David A. Curry