统一入侵检测报警信息格式提案及其实现*

为增强IDS之间信息共享和交换的能力，加强IDS之间的交流和协作，给出了统一入侵报警信息格式的详细提案，并提出了用XML Schema对报警信息建模的方案，最后用XML描述语言实现了该提案并通过了XML Schema的有效性验证。所提出的统一入侵检测报警信息格式提案给不同IDS之间和IDS不同组件之间提供了信息共享和信息交换的平台，对于增强IDS之间以及IDS和其他安全设备的协作能力具有十分重要的意义。

Design and Implementation of Unifying Alert Information Format Scheme

In order to improve the ability of information share and exchange,and strengthen the communication and collaboration between IDSs,the Unifying Alert Information Format Scheme(UAIFS) is presented,and the alert information modeling method with XML Schema is also presented.At last,the UAIFS is implemented with XML,and its validation is proved by XML Schema.The UAIFS can provide the ability of sharing and exchanging information among IDSs and IDS's components.So it is significant for IDSs and other security equipments to exchange the collaboration ability.