02/05/2015

02:15 PM SECEF Schema: RE: Subclassing vs AdditionalData

The same kind of issue probably applies to WebService and SNMPService.

02:12 PM SECEF Schema: Subclassing vs AdditionalData

The IDMEF RFC provides several subclasses of the Alert class:
* ToolAlert should provide additional information if...

12:55 PM SECEF Schema: RE: Normalization and taxonomy

Yoann Vandoorselaere wrote:
> This has already been stated when talking with Hervé, but the following would in my o...

01/20/2015

06:57 AM SECEF Schema: Schema: Usefulness of subclasses

The IDMEF RFC provides several subclasses of the Alert class:
* ToolAlert should provide additional information if...

06:48 AM SECEF Schema: Schema: Usefulness of unique identifiers

The IDMEF RFC provides for two kinds of identifiers:
* The "id" (analyzerid, messageid) is used to uniquely identi...

06:36 AM SECEF Schema: RE: SCADA and IDMEF

I can see two specific issues:
# Update to the keyword list of classification, to include specific source of vulne...

06:32 AM SECEF Schema: RE: abbreviation of fields

I agree with Gilles and Ludovic. In essence, it significantly reduces the readability of messages. It only is useful ...