[scap_interest] Summary of first SCAP BOF meeting

Steve Hanna <stevehanna.travel@gmail.com> Wed, 10 November 2010 14:10 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=ogJoex77zuQkdHWpcVY04Mt4ZQhBtmSZTYH2op6epHeJgAFSJ+d/YmwSP2BpC6QtVV aVoiJnJ+jPtRHjT5nsFcCQeU98dqi4jU3ryIIrVZ4n/m/0U+/Q8s6TwdP8ZSHVOoVhA+ gXF6FjGRtYobE9+zArWltb6G/XnduvowM3LBc=
MIME-Version: 1.0
Date: Wed, 10 Nov 2010 22:10:39 +0800
Message-ID: <AANLkTinDhOQ=+VwXBcpz68qvU8UuGJ+TuODqCyoKz2Rr@mail.gmail.com>
From: Steve Hanna <stevehanna.travel@gmail.com>
To: scap_interest@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Subject: [scap_interest] Summary of first SCAP BOF meeting
Precedence: list

While we're waiting for initial minutes from the SCAP BOF, here's the
summary that I sent to SAAG (Security Area Advisory Group). FYI.

Thanks,

Steve

----------------------------------------------

The SCAP BOF met on Tuesday, November 9 from 1520 to 1810. This was
an exploratory BOF devoted to exploring the possible ways in which the
IETF and SCAP communities can work together. After an SCAP Overview
and several presentations that looked at SCAP from several perspectives
(Network Management, NEA, and ITU CYBEX), there was an extensive Q&A
and a discussion of the possibilities for collaboration. The group
agreed to write
up an Internet Draft with collaboration ideas, focusing especially on network
protocols that the SCAP community needs: reporting on SCAP compliance
within a NEA assessment, provisioning XCCDF and OVAL content to an
endpoint, etc. This draft can stimulate more concrete discussions about
whether a WG should be formed.

[scap_interest] Summary of first SCAP BOF meeting Steve Hanna