[feedback-report] So...

David Saez david at ols.es
Mon Aug 1 12:59:14 PDT 2005


Hi !!

> ...either the list is entirely broken except for me, or nobody cares 
> about the additional use cases that have been proposed.  Right?

i also did not receive any message about it, how should i
interpret it ? nobody is against it or nobody aproves it ?

Other proposals exists for a format for incident interchange
between CSIRTs (IODEF) but it's very heavy and based on xml.
I've been this week on a abuse's team working group here in
Spain with large isp's, universities, etc ... For some of
them, specially the ones who provide dsl access, about 80%
of reported incidents are about copyright (P2P networks) and
the rest is pishing, scams, spam, ports scans, etc ... One
on the missions of that group is to define a format for
incident reporting via email, but that format should include
all kinds of incidents. The format proposed in this list is
simple and nice, but it does not accomodate other kinds of
incidents. With little modifications it could be used for any
kind of incident without having to reach the complexity of
IODEF, anybody has objections to this ?

Resources:

Object Description and Exchange Format Working Group (IODEF WG):
http://www.terena.nl/tech/task-forces/tf-csirt/iodef/index.html

-- 
Best regrads ...

----------------------------------------------------------------
    David Saez Padros                http://www.ols.es
    On-Line Services 2000 S.L.       e-mail  david at ols.es
    Pintor Vayreda 1                 telf    +34 902 50 29 75
    08184 Palau-Solita i Plegamans   movil   +34 670 35 27 53
----------------------------------------------------------------






More information about the abuse-feedback-report mailing list