[ main >> mod_sec 2.0 ]

Qualified Security Advisory Reference (mod_sec)

Abstract

This document provides information for the mod_sec XML format.

In order to gather the information and perform the relationship between the gathered information, it is necessary to improve the method of the security information sharing. If the security information is machine readable, many Internet sites can reduce the cost of information gathering. Our security information sharing proposes the XML formats as to approach solving these problems. JVNRSS (http://jvnrss.ise.chuo-u.ac.jp/jtg/mod_sec/) is the overview XML format based on RSS with mod_sec and VULDEF (http://jvnrss.ise.chuo-u.ac.jp/jtg/vuldef/) is the detail XML format.

The classification of JVNRSS and VULDEF

Authors

The members of JVNRSS Feasibility Study Team:

Masato Terada (IPA, JPCERT/CC)
JVN Working Group (JPCERT/CC, IPA)

Version

Latest Version: V2.1 2009-04-28
V2.1 2009-04-28
http://jvndb.jvn.jp/en/schema/jvnrss.html
Publish JVNRSS specification and XML schema on jvndb.jvn.jp.
V2.0 2009-01-05
http://jvnrss.ise.chuo-u.ac.jp/jtg/mod_sec/2.0/
V2.0 supports XML Schema file (mod_sec_2.0.xsd).
Tags deleted: <sec:category>, <sec:hierarchy>
V1.0 2008-05-19
http://jvnrss.ise.chuo-u.ac.jp/jtg/mod_sec/1.0/ (in Japanese)
New tags added: <sec:cpe-item>
V1.0beta 2007-06-30
http://jvnrss.ise.chuo-u.ac.jp/jtg/mod_sec/1.0b/ (in Japanese)
New tags added: <sec:category>, <sec:cvss>, <sec:hierarchy>
V1.0alpha 2005-10-31
http://jvnrss.ise.chuo-u.ac.jp/jtg/mod_sec/1.0a/

Status

Proposed

Comments should be directed to the JVN Working Group.

Rights

Copyright © 2005 - 2009 by the Authors.

Permission to use, copy, modify and distribute the mod_sec Specification and its accompanying documentation for any purpose and without fee is hereby granted in perpetuity, provided that the above copyright notice and this paragraph appear in all copies. The copyright holders make no representation about the suitability of the specification for any purpose. It is provided "as is" without expressed or implied warranty.

This copyright applies to the mod_sec Specification and accompanying documentation and does not extend to the mod_sec format itself.