Application Vulnerability Description Language (AVDL): An XML definition for exchange of information relating to security vulnerabilities of applications exposed to networks. Organization: OASIS. More information: AVDL page on the OASIS website (new window)
Intrusion Detection Message Exchange Format (IDMEF): Data formats and exchange procedures for sharing information of interest to intrusion detection and response systems, and to management systems which may need to interact with them. Organization: IETF. More information: IDMEF page on the IEFT website (new window)
The Web-Based Enterprise Management (WBEM) Initiative: A set of management and Internet standard technologies developed to unify the management of enterprise computing environments. WBEM provides the ability for the industry to deliver a well-integrated set of standard-based management tools leveraging the emerging Web technologies. The DMTF has developed a core set of standards that make up WBEM, which includes a data model, the Common Information Model (CIM) standard; an encoding specification, xmlCIM Encoding Specification; and a transport mechanism, CIM Operations over HTTP. The CIM specification is the language and methodology for describing management data. The CIM schema includes models for Systems, Applications, Networks (LAN) and Devices. The CIM schema will enable applications from different developers on different platforms to describe management data in a standard format so that it can be shared among a variety of management applications. The xmlCIM Encoding Specification defines XML elements, written in Document Type Definition (DTD), which can be used to represent CIM classes and instances. The CIM Operations over HTTP specification defines a mapping of CIM operations onto HTTP that allows implementations of CIM to interoperate in an open, standardized manner and completes the technologies that support WBEM. Organization: The Distributed Management Task Force (DMTF). More information: WBEM page on the DMTF website (new window)
Utility Computing Environment: Two organizations have announced work in this area. They are the Distributed Management Task Force (DMTF) and the Data Center Markup Language (DCML) Interest Group.
Web Services Distributed Management (WSDM): The Web Services Distributed Management (WSDM) specifies the Web services architecture and technology to manage distributed resources. It includes a model of a Web service as a manageable resource. Organization: OASIS. More information: WAS page on the OASIS website (new window)
Web Application Security (WAS): The Web Application Security (WAS) specification includes:
- a classification scheme for Web security vulnerabilities
- a model to provide guidance for initial threat, impact and therefore risk ratings
- an XML schema to describe web security conditions that can be used by both assessment and protection tools
Organization: OASIS. More information: WAS page on the OASIS website (new window)
More on the general topic: Common XML vocabularies
- Address XML
- Content Syndication XML
- Customer Information XML
- Electronic Data Interchange (EDI) XML
- Geospatial XML
- Human XML
- Localization XML
- Math XML
- Open Applications Group Integration Specification (OAGIS)
- Open Office XML
- Topic maps XML
- Trade XML
- Translation XML
- Universal Business Language (UBL)
- Universal Data Element Framework (UDEF)
