%% You should probably cite rfc7970 instead of this I-D.
@techreport{ietf-mile-rfc5070-bis-26,
    number =    {draft-ietf-mile-rfc5070-bis-26},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-mile-rfc5070-bis/26/},
    author =    {Roman Danyliw},
    title =     {{The Incident Object Description Exchange Format Version 2}},
    pagetotal = 172,
    year =      2016,
    month =     oct,
    day =       5,
    abstract =  {The Incident Object Description Exchange Format (IODEF) defines a data representation for security incident reports and indicators commonly exchanged by operational security teams for mitigation and watch and warning. This document describes an updated information model for the IODEF and provides an associated data model specified with the XML schema. This new information and data model obsoletes RFCs 5070 and 6685.},
}