From idwg-public-request@semper.org  Tue Apr  2 14:09:30 2002
Received: from www.opencard.org (www.opencard.org [195.212.119.145])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA28402
	for <idwg-archive@odin.ietf.org>; Tue, 2 Apr 2002 14:09:29 -0500 (EST)
Received: by www.opencard.org (Postfix, from userid 503)
	id 9EDF634575; Tue,  2 Apr 2002 21:09:24 +0200 (CEST)
Old-Return-Path: <joey@SiliconDefense.com>
Delivered-To: semper-idwg-public@opencard.org
Sender: joey@SiliconDefense.com
Message-Id: <3CAA0126.A7FBC214@SiliconDefense.com>
Date: Tue, 02 Apr 2002 11:06:14 -0800
From: Joe McAlerney <joey@SiliconDefense.com>
X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.4.6 i686)
X-Accept-Language: en
Mime-Version: 1.0
To: IDWG <idwg-public@zurich.ibm.com>,
        Libidmef Developers <libidmef-devel@lists.sourceforge.net>
Subject: Interesting discussion
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Resent-Message-ID: <IJ5WqB.A.qV.kHgq8@www.opencard.org>
Resent-From: idwg-public@semper.org
X-Mailing-List: <idwg-public@semper.org> archive/latest/508
X-Loop: idwg-public@semper.org
Precedence: list
Resent-Sender: idwg-public-request@semper.org
Resent-Date: Tue,  2 Apr 2002 21:09:24 +0200 (CEST)
Content-Transfer-Encoding: 7bit

It's probably worthwhile to post this for those of you not on the
focus-ids list.  There is an interesting discussion taking place that
has branched into representing security events.  There are a number of
opinions about XML-based representations and IDMEF in general.

It starts here.  You should view the thread index for the remainder of
the discussion.

http://online.securityfocus.com/archive/96/264481

It is also discussed in this thread.

http://online.securityfocus.com/archive/96/264967

Some very interesting points are brought up that bring both design and
implementation challenges.

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions



From idwg-public-request@semper.org  Mon Apr 22 17:01:59 2002
Received: from www.opencard.org (www.opencard.org [195.212.119.145])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA13025
	for <idwg-archive@odin.ietf.org>; Mon, 22 Apr 2002 17:01:58 -0400 (EDT)
Received: by www.opencard.org (Postfix, from userid 503)
	id 295EA34656; Mon, 22 Apr 2002 23:02:14 +0200 (CEST)
Old-Return-Path: <vze2729k@verizon.net>
Delivered-To: semper-idwg-public@opencard.org
Message-Id: <003c01c1ea41$1b8a3220$a002a8c0@Chizmadia>
Reply-To: "David Chizmadia" <dchizmadia@promia.com>
From: "David Chizmadia" <vze2729k@verizon.net>
To: <idwg-public@zurich.ibm.com>
Subject: UML diagram of IDMEF?
Date: Mon, 22 Apr 2002 17:03:04 -0400
Organization: Promia, Inc
Mime-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Msmail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6600
X-Mimeole: Produced By Microsoft MimeOLE V5.00.2919.6600
Resent-Message-ID: <afaukD.A.j5C.WpHx8@www.opencard.org>
Resent-From: idwg-public@semper.org
X-Mailing-List: <idwg-public@semper.org> archive/latest/509
X-Loop: idwg-public@semper.org
Precedence: list
Resent-Sender: idwg-public-request@semper.org
Resent-Date: Mon, 22 Apr 2002 23:02:14 +0200 (CEST)
Content-Transfer-Encoding: 7bit

Hi all,

    Is anyone aware of a complete IDMEF UML diagram in XMI, JPEG, GIF or
other graphical format? If so, how would I go about getting a copy?

    Thanks,

-DMC
David Chizmadia
Senior Software Security Architect
Promia, Inc
dchizmadia@promia.com



From idwg-public-request@semper.org  Tue Apr 23 23:01:10 2002
Received: from www.opencard.org (www.opencard.org [195.212.119.145])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA14248
	for <idwg-archive@odin.ietf.org>; Tue, 23 Apr 2002 23:01:09 -0400 (EDT)
Received: by www.opencard.org (Postfix, from userid 503)
	id 9FEF434639; Wed, 24 Apr 2002 05:01:18 +0200 (CEST)
Old-Return-Path: <vze2729k@verizon.net>
Delivered-To: semper-idwg-public@opencard.org
Message-Id: <001a01c1eb3b$ed850480$1e02a8c0@Chizmadia>
Reply-To: "David Chizmadia" <dchizmadia@promia.com>
From: "David Chizmadia" <vze2729k@verizon.net>
To: <idwg-public@zurich.ibm.com>
Subject: IDMEF Model in Powerpoint
Date: Tue, 23 Apr 2002 22:58:21 -0400
Organization: Promia, Inc
Mime-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0017_01C1EB1A.5D7350C0"
X-Priority: 3
X-Msmail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-Mimeole: Produced By Microsoft MimeOLE V5.50.4522.1200
Resent-Message-ID: <od35rD.A.5rF.9_hx8@www.opencard.org>
Resent-From: idwg-public@semper.org
X-Mailing-List: <idwg-public@semper.org> archive/latest/510
X-Loop: idwg-public@semper.org
Precedence: list
Resent-Sender: idwg-public-request@semper.org
Resent-Date: Wed, 24 Apr 2002 05:01:18 +0200 (CEST)

This is a multi-part message in MIME format.

------=_NextPart_000_0017_01C1EB1A.5D7350C0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Hello all,

    As a follow-on to my Monday morning message, no one had the IDMEF
model captured in a graphical format - such as a UML tool that could
export JPEG. A couple of other people are in the process of doing so. I
needed the diagram by tomorrow, so after wasting a half day fighting with
PoseidonCE, I decided that it might be easier to create a native
Powerpoint version.

    I've attached a zipped copy of the result, since it is so small (10K).
Enjoy.

    As an editorial note, in the process of going through the draft-06 to
get the needed info, I noticed that the ASCII diagram of the Heartbeat
class on page 28 (Section 5.1) is missing the AnalyzerTime element that is
shown on page 36 (Section 5.2.3) and included in the DTD. This should
probably be fixed in the final spec.

-DMC
David Chizmadia
Senior Software Security Architect
Promia, Inc.
dchizmadia@promia.com

------=_NextPart_000_0017_01C1EB1A.5D7350C0
Content-Type: application/x-zip-compressed;
	name="IDMEF-Model.zip"
Content-Disposition: attachment;
	filename="IDMEF-Model.zip"
Content-Transfer-Encoding: base64
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------=_NextPart_000_0017_01C1EB1A.5D7350C0--



From idwg-public-request@semper.org  Tue Apr 30 04:00:08 2002
Received: from www.opencard.org (www.opencard.org [195.212.119.145])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA10225
	for <idwg-archive@lists.ietf.org>; Tue, 30 Apr 2002 04:00:07 -0400 (EDT)
Received: by www.opencard.org (Postfix, from userid 503)
	id BD08034940; Mon, 29 Apr 2002 11:55:29 +0200 (CEST)
Old-Return-Path: <Remco.deboer@ubizen.com>
Delivered-To: semper-idwg-public@opencard.org
Message-Id: <B37F5E3973A6D411A48B00508BF7CEFC5D3038@UBNLCOM1>
From: Remco de Boer <Remco.deboer@ubizen.com>
To: "'David Chizmadia'" <dchizmadia@promia.com>
Cc: "Intrusion Detection Wg (E-mail)" <idwg-public@zurich.ibm.com>
Subject: RE: IDMEF Model in Powerpoint
Date: Mon, 29 Apr 2002 11:56:57 +0200
Mime-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="windows-1252"
X-Sanitizer: Out
Resent-Message-ID: <7K6GO.A.KgB.RiRz8@www.opencard.org>
Resent-From: idwg-public@semper.org
X-Mailing-List: <idwg-public@semper.org> archive/latest/511
X-Loop: idwg-public@semper.org
Precedence: list
Resent-Sender: idwg-public-request@semper.org
Resent-Date: Mon, 29 Apr 2002 11:55:29 +0200 (CEST)



Hi David, List

>     As a follow-on to my Monday morning message, no one had the IDMEF
> model captured in a graphical format - such as a UML tool that could

My reaction might be a bit late, but I happen to have a graphical version of
the IDMEF model. It is a high-level overview that shows all classes and the
relations between them. It does not include the member attributes, although
I do have a collection of MS Visio files that, taken together, should
describe the complete model including member attributes. If anyone's
interested, I could post the overview here on the list (zipped PNG, 70kb)
and maybe send the collection of Visio files to David as a starting point
for his complete diagram?

Regards,
Remco



