[libidmef-devel] Interesting discussion

[Joe M. <jo...@Si...>]

It's probably worthwhile to post this for those of you not on the
focus-ids list.  There is an interesting discussion taking place that
has branched into representing security events.  There are a number of
opinions about XML-based representations and IDMEF in general.

It starts here.  You should view the thread index for the remainder of
the discussion.

http://online.securityfocus.com/archive/96/264481

It is also discussed in this thread.

http://online.securityfocus.com/archive/96/264967

Some very interesting points are brought up that bring both design and
implementation challenges.

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions