Security Automation Conference & Developer meeting III proposal

1 message

Security Automation Conference & Developer meeting III proposal

Reply Threaded

Hello all,

The next developer meeting is going to take place at NIST's Security Automation Conference in Baltimore. Specifically, there is a workshop on XCCDF scheduled for Thursday, October 29 from 11:00 AM to 3:15 PM (and yes, there is an 75 minute lunch break in there).

I plan to start the session with a very short briefing on the state of XCCDF (in particular, the list of remaining issues for discussion that I am aware of) and open the floor to general community concerns. Since we should (I hope) still have more time than usual, I would like to try to tackle what I am anticipating to be a challenging topic - the structure of XCCDF Values Specific topics include the data-types of Value values, support for lists or other structured content, and support for global vs. local mappings of Values. Attached is a write-up on this topic.

I encourage people to read and discuss the issue and proposal over the mailing list ahead of time. Unfortunately, at this time I do not know if it will be possible for people to call in to this discussion. I will send an update to the list if this can be arranged.

As always, comments or suggestions regarding these meetings are welcome.

Thanks,
Charles Schmidt
The MITRE Corp.

[XCCDF Technical Workshop.ics]

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN VERSION:2.0 METHOD:PUBLISH X-MS-OLK-FORCEINSPECTOROPEN:TRUE BEGIN:VEVENT CLASS:PUBLIC CREATED:20091016T142452Z DESCRIPTION:The XCCDF workshop at NIST's IT Security Automation Conference will focus primarily on a discussion of Value data\, its structure and use . A detailed write-up on these issues is available from the mailing list a rchive.\n DTEND:20091029T191500Z DTSTAMP:20091016T142452Z DTSTART:20091029T150000Z LAST-MODIFIED:20091016T142452Z LOCATION:5th IT Security Automation Conference\, Baltimore Convention Cente r\, Track 1 PRIORITY:5 SEQUENCE:0 SUMMARY;LANGUAGE=en-us:XCCDF Technical Workshop TRANSP:OPAQUE UID:040000008200E00074C5B7101A82E0080000000000D3D55E424ECA01000000000000000 0100000006A94445457AC804C8990546371D339F2 X-ALT-DESC;FMTTYPE=text/html:<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//E N">\n<HTML>\n<HEAD>\n<META NAME="Generator" CONTENT="MS Exchange Server ve rsion 08.00.0681.000">\n<TITLE></TITLE>\n</HEAD>\n<BODY>\n\n\nThe XCCDF workshop at NIST's IT Security Automation Conference will</F ONT> focus primarily on a d iscussion of Value data\, its structure and use. A detailed write-up on these issues is availa ble from the mailing list archive. \n\n</BODY>\n</HTML> X-MICROSOFT-CDO-BUSYSTATUS:BUSY X-MICROSOFT-CDO-IMPORTANCE:1 X-MICROSOFT-DISALLOW-COUNTER:FALSE X-MS-OLK-ALLOWEXTERNCHECK:TRUE X-MS-OLK-AUTOFILLLOCATION:FALSE X-MS-OLK-CONFTYPE:0 BEGIN:VALARM TRIGGER:-PT5M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

XCCDFValuesContents.pdf (118K) Download Attachment