%% You should probably cite rfc7203 instead of this I-D.
@techreport{ietf-mile-sci-03,
    number =    {draft-ietf-mile-sci-03},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-mile-sci/03/},
    author =    {Takeshi Takahashi and Kent Landfield and Thomas Millar and Youki Kadobayashi},
    title =     {{IODEF-extension to support structured cybersecurity information}},
    pagetotal = 38,
    year =      2012,
    month =     apr,
    day =       11,
    abstract =  {This document extends the Incident Object Description Exchange Format (IODEF) defined in RFC 5070 {[}RFC5070{]} to facilitate enriched cybersecurity information exchange among cybersecurity entities by embedding structured information formatted by specifications, including CAPEC{[}TM{]} {[}CAPEC{]}, CEE{[}TM{]} {[}CEE{]}, CPE{[}TM{]} {[}CPE{]}, CVE(R) {[}CVE{]}, CVRF {[}CVRF{]}, CVSS {[}CVSS{]}, CWE{[}TM{]} {[}CWE{]}, CWSS{[}TM{]} {[}CWSS{]}, OCIL {[}OCIL{]}, OVAL(R) {[}OVAL{]}, and XCCDF {[}XCCDF{]}.},
}