Chapter 13: Standardization in the Field of Intrusion Detection

---

Overview

Currently, there are two strategies that have priority in standardization in the field of intrusion detection. The first line of research is the creation of protocols and interfaces that allow you to organize communications between intrusion detection systems from different manufacturers. The second is the development of requirements for testing and certifying intrusion detection systems.

The first step in this direction is development of the Common Intrusion Detection Framework standard (CIDF). The creation of the Intrusion Detection Working Group (IDWG), under IETF, served as an extension of this strategy. Currently, IDWG is very close to accomplishing its work on determining the requirements that will allow for the coordination and integration of the operation of intrusion detection systems from different manufacturers.

The second line of development is also very important. It includes the investigations performed by the Lincoln Laboratory and the Intrusion Detection Systems Consortium (IDSC) under the International Computer Security Association (ICSA), as well as all research aimed at formalization of requirements for intrusion detection systems.

---