Threat - 威胁检测对象区 —— 入侵尝试、异常流量、恶意扫描、异常登录行为与威胁等级

Go back Parent node: Security Domain - 安全域 —— 部署运行状态类的安全对象（PKI 监控、认证、审计、合规、威胁），区别于安全产品线 1.3.6.1.4.1.59719.2.900 (1.3.6.1.4.1.59719.6)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.6.5`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) security(6) threat(5) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Security/Threat`
WEID notation:	`weid:P-1A2V-6-5-2`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:06:05`

Description

English:
Threat detection object area. Describes detected security threats and risk events, including intrusion attempts, abnormal traffic, malicious scanning, abnormal login behavior and threat severity, and supports linkage with notifications and blocking policies.
Status: registered but unused. No object has been implemented; when implementing, define the threat severity scale and the linkage rule to notifications (1.3.6.1.4.1.59719.0.4, currently reserved) and blocking policies. The unused state shall be re-verified at each revision of this file.
Recommendation: security event notifications belong to the reserved sub-area 1.3.6.1.4.1.59719.0.4; activating that sub-area is the recommended next step when this object area is implemented.
See also: 1.3.6.1.4.1.59719.0.4 (reserved), 1.3.6.1.4.1.59719.2.400, 1.3.6.1.4.1.59719.6.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
威胁检测对象区。描述已发现的安全威胁与风险事件，包含入侵尝试、异常流量、恶意扫描、异常登录行为与威胁等级，并支持与通知及阻断策略联动。
状态：已注册但未使用。尚无对象被实现；实现时应定义威胁等级标尺，以及与通知（1.3.6.1.4.1.59719.0.4，当前预留）和阻断策略的联动规则。本文件每次修订时须重新核验该未使用状态。
建议：安全事件通知应归属预留子区 1.3.6.1.4.1.59719.0.4；本对象区实现时，建议同步启用该子区。
关联节点：1.3.6.1.4.1.59719.0.4（预留）、1.3.6.1.4.1.59719.2.400、1.3.6.1.4.1.59719.6.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC13E0EF7F (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470605 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-e6b70d384b8f	OIDplus Information Object Custom UUID (RFC 9562)
guid:d406b462-7662-3623-afad-1fff0311ce9e	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:c64ecb66-3752-50af-86ae-a8bbad632c37	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:22-4E-93-E0-EF-7F	OIDplus Information Object MAC address, Unicast (AAI)
mac:23-4E-93-E0-EF-7F	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-6-5-2	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=333508479	OIDplus Information Object X.500 DN