CEE Announce - July 30, 2008 (opt-in newsletter from the CEE Web site)

[heinbockel]

Welcome to the latest issue of the CEE-Announce e-newsletter. This
email newsletter is designed to bring recent news about CEE, such as
new versions of the language specifications, upcoming conferences, new
Web site features, etc. right to your emailbox. Common Event
Expression (CEE) standardizes the way computer events are described,
logged, and exchanged. By using CEE's common language and syntax,
enterprise-wide log management, correlation, aggregation, auditing,
and incident handling can be performed more efficiently and produce
better results than was possible prior to CEE. Details on subscribing
(and unsubscribing) to the email newsletter are at the end.

Please feel free to pass this newsletter on to interested colleagues.

Comments: [hidden email]

-------------------------------------------------------
CEE-Announce e-newsletter/July 30, 2008
-------------------------------------------------------

Contents:

1. Feature Story
2. UPCOMING CEE COMMUNITY MEETINGS
3. Also in this Issue
4. Details/Credits + Subscribing and Unsubscribing




FEATURE STORY:


Burton Group, Open Group, and Novell Join CEE Effort

Burton Group, Open Group, and Novell have joined the CEE effort to
create a single, unified, and industry-adopted log standard. The three
organizations joined CEE after a very productive meeting at the
"Common Events" Standards Special Interest Group (SIG)" at the "Burton
Group Catalyst Conference North America 2008 in June.

The CEE Team especially recognizes the work done by Novell and Open
Group in the creation of the XDAS draft specification for distributed
audit services. The XDAS specification, which is free to download on
the Open Group Web site, "defines a set of generic events of relevance
at a global distributed system level, and a common portable audit
record format to facilitate the merging and analysis of audit
information from multiple components at the distributed system level.
Four groups of APIs are provided to accomplish this."

The experience and knowledge of these three organizations, in both the
logging and standardization space, strongly complements that of MITRE
and other members of the CEE community.


LINKS:

Burton Group - http://www.burtongroup.com

Open Group - http://www.opengroup.org

Novell - http://www.novell.com

XDAS specification - http://www.opengroup.org/pubs/catalog/p441.htm

CEE Web site - http://cee.mitre.org


-------------------------------------------------------------
UPCOMING CEE COMMUNITY MEETINGS:


Two meetings are scheduled in August for members and prospective
members of the CEE Community:

(1) CEE Working Group Meeting Scheduled for August 8

A face-to-face CEE Working Group meeting is currently scheduled for
Friday, August 8, 2008 at the Riviera Hotel & Casino, Las Vegas,
Nevada, USA. Numerous members of the CEE community will already be
present at this location for "Black Hat Briefings 2008" and "DefCon
16." Interested attendees should convene at 12 p.m. outside the DefCon
registration area at the Riviera Hotel & Casino
(http://www.rivierahotel.com). For those who would like to attend, but
cannot be at the Riviera by noon, please contact us at [hidden email].

(2) CEE Community Teleconference Scheduled for August 29

A CEE Community Teleconference Meeting is currently scheduled for
August 29, 2008 from 12 p.m. to 2 p.m., EST. The meeting is open to
anyone interested in CEE. The agenda will include a report on recent
CEE meetings and activities, including those at the Burton Group CES
SIG and at Black Hat Briefings 2008. We would also like to come to
agreement on a roadmap and prioritization for creating log
specifications and documents.

Phone numbers: 866-648-7367 (North America callers only);
1-703-983-6338 or 781-271-6338 (International)
Meeting ID: 2331


For additional information on either of these events please contact us
at [hidden email].


LINKS:

CEE Working Group page - http://cee.mitre.org/workinggroup.html

CEE Community Discussion List sign-up page -
http://cee.mitre.org/discussiongroup.html

CEE Calendar - http://cee.mitre.org/calendar


-------------------------------------------------------------
ALSO IN THIS ISSUE:


* CEE Scheduled to Participate in 'Making Security Measurable' Booth
at "Black Hat Briefings 2008" on August 6-7


Read these stories and more news at http://cee.mitre.org/news


---------------------------------------------------------------
Details/Credits + Subscribing and Unsubscribing

Managing Editor: William J. Heinbockel. Writer: Bob Roberge. The MITRE
Corporation (www.mitre.org) maintains CEE and provides impartial
technical guidance to the CEE Board and Working Group on all matters
related to ongoing development of CEE.

To unsubscribe from the CEE-Announce e-newsletter, open a new email
message and copy the following text to the BODY of the message
"SIGNOFF CEE-Announce-list", then send the message to:
[hidden email]. To subscribe, send an email message to
[hidden email] with the following text in the BODY of the
message: "SUBSCRIBE CEE-Announce-List".

Copyright 2008, The MITRE Corporation. CEE and the CEE logo are
registered trademarks of The MITRE Corporation.

For more information about CEE, visit the CEE Web site at
http://cee.mitre.org or send an email to [hidden email]. Learn more
about Making Security Measurable at
http://measurablesecurity.mitre.org.