[saag] MILE Summary

["Moriarty, Kathleen" <[e-mail]>]

MILE WG Summary:
MILE met on November 6th, Tuesday at 3:20 and had a productive session.  Two new drafts were reviewed and there seems to be general agreement that the work is needed.  The drafts will require a call for WG adoption and a charter change.
   Resource Oriented Lightweight Indicator Exchange: 
   http://datatracker.ietf.org/doc/draft-field-mile-rolie/

   IODEF Enumeration Reference Format
   http://datatracker.ietf.org/doc/draft-montville-mile-enum-reference-format/

The Structured Cyber Security (SCI) draft was reviewed and updates per the WG decision from the last meeting were made to the current version.  The editor will drive the document with a use case focus going forward to ensure the use cases that are requirements driven are actually met through this draft.  We'll need to see discussion on the mailing list and participation from incident responders (a little tough as they don't like to talk openly).
   IODEF extension to Support structured cybersecurity information
   http://datatracker.ietf.org/doc/draft-ietf-mile-sci/

Additionally, two other drafts are expected before the next meeting to update the base format to exchange incident information as well as provide guidance to implementers to ensure consistent representation of incidents can be done for interoperability between implementations.
   RFC5070-bis with 2 volunteer editors (one was an RFC5070 editor)
   IODEF Guidance with 3 volunteer editors

Additional drafts expected to be updated before the next meeting
   WG document: GRC Exchange, 
   http://datatracker.ietf.org/doc/draft-ietf-mile-grc-exchange/

  non-WG document: IODEF Forensics extension
  http://datatracker.ietf.org/doc/draft-inacio-mile-forensics/

Some discussion on an XMPP binding for IODEF/RID and we need to hear feedback on the list if this will be helpful with some use case background/explanation.  Peter St. Andre has volunteered to work on such a draft if it is useful to the WG.