IDWG
Click on the red underlined text to get to the source
... IDMEF) [5], a product of the Intrusion
Detection Exchange Format Working Group (IDWG). IDMEF was planned to
be a standard format that automated Intrusion Detection Systems ...
... for a communication protocol for communicating IDMEF. As chartered,
IDWG has the responsibility to first evaluate existing communication
protocols before choosing to specify a new one. Thus the
requirements ...
... requirements in this document can be used to evaluate existing
communication protocols. If IDWG determines that a new communication
protocol is necessary, the requirements in this document can be used
...
... described behavior or characteristic is an absolute requirement
for a proposed IDWG specification.
o MUST NOT: This phrase, or the phrase SHALL NOT, means that the
...
... o MUST NOT: This phrase, or the phrase SHALL NOT, means that the
described behavior or characteristic is an absolute prohibition of
a proposed IDWG specification.
o SHOULD: This word, or the adjective RECOMMENDED, means that there
...
... may exist valid reasons in particular circumstances for a proposed
IDWG specification to ignore described behavior or
characteristics.
...
... o MAY: This word, or the adjective OPTIONAL, means that the
described behavior or characteristic is truly optional for a
proposed IDWG specification. One proposed specification may
choose to include the described behavior or characteristic,
whereas another proposed specification may omit the same behavior
...
...
Besides this requirements document, the IDWG should produce two other
documents. The first should describe a data format or language ...