@techreport{staniford-cidf-data-formats-00, number = {draft-staniford-cidf-data-formats-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-staniford-cidf-data-formats/00/}, author = {Brian Tung and Stuart Staniford-Chen and Phil Porras and Clifford Kahn and Dan Schnackenberg and Rich Feiertag and Maureen Stillman}, title = {{The Common Intrusion Detection Framework - Data Formats}}, pagetotal = 68, year = 1998, month = mar, day = 16, abstract = {This document defines portions of the Common Intrusion Detection Framework (CIDF), specifically the data formats used. CIDF is designed to allow intrusion detection systems (IDS) to interoperate with one another. Two layered formats are defined here: Gidos, which are a high-level data structure intended to allow IDS systems to exchange messages describing the state of the world, events occurring, and recommended actions with somewhat standardized semantics. Gidos can be encoded in CIDF messages, the format for which is also defined here.}, }