Re: [scap_interest] Operational Aspects

I highlighted the interfaces to be standardized in the recent ITSAC,

http://scap.nist.gov/events/2011/itsac/presentations/day3/Basavanna%20-%20SC
AP%20Content%20Repository.pdf

Search interfaces for all SCAP elements need to be standardized along with
Client validation as Gunnar noted already. We currently have API's to do the
searches, we are considering giving an external interface through WSDL.

Chandra.

From: scap_interest-bounces@ietf.org [mailto:scap_interest-bounces@ietf.org]
On Behalf Of Waltermire, David A.
Sent: Friday, February 17, 2012 12:32 AM
To: Kent_Landfield@McAfee.com; lnunez@c3isecurity.com;
amontville@tripwire.com
Cc: scap_interest@ietf.org
Subject: Re: [scap_interest] Operational Aspects

We are continuing to work on this and I am very interested in developing
standards in this area.  I am currently working on developing an open source
prototype that can be used to evaluate standardized approaches to this
problem.  I haven't published the latest code on this yet, but the original
work we started can be found at:

http://code.google.com/p/security-automation-content-repository/

The companion presentation to Kent's from March can be found here:

http://scap.nist.gov/events/2011/saddsp/presentations/Security_Automation_Co
ntent_Repository_Demo.pdf

Dave

From: scap_interest-bounces@ietf.org [mailto:scap_interest-bounces@ietf.org]
On Behalf Of Kent_Landfield@McAfee.com
Sent: Thursday, February 16, 2012 1:46 PM
To: lnunez@c3isecurity.com; amontville@tripwire.com
Cc: scap_interest@ietf.org
Subject: Re: [scap_interest] Operational Aspects

I see the topic of Content Repository interfaces as very important item that
really should be worked here.  We have been talking about this topic for
over two years now as you both are aware.  I am including the presentation
that was given at SCAP Winter Developer Days last March that may help frame
the issues.   

Kent Landfield
Director Content Strategy, Architecture and Standards

McAfee | An Intel Company
5000 Headquarters Dr.
Plano, Texas 75024

Direct: +1.972.963.7096 
Mobile: +1.817.637.8026
Web: www.mcafee.com <http://www.mcafee.com/> 

From: Luis Nunez <lnunez@c3isecurity.com>
Date: Thu, 16 Feb 2012 11:54:21 -0600
To: Adam Montville <amontville@tripwire.com>
Cc: Kent Landfield <kent_landfield@mcafee.com>, "scap_interest@ietf.org"
<scap_interest@ietf.org>
Subject: Re: [scap_interest] Operational Aspects

Since you mentioned "NVD" also known as the National Vulnerability Database.
I think at some point the IETF will be helpful in creating a protocol to
communicate with these content repositories.  Last I counted was 7 content
repositories.

In no particular order and I am sure there are more out there.

-SecPod

-Novell

-NVD

-IT Security Database

-Debian 

-Altx-soft

-ln

On Feb 14, 2012, at 5:18 PM, Adam Montville wrote:

Fair enough.  Just throwing things against the wall as they come to mind.

Adam

From: kent_landfield
<kent_landfield@mcafee.com<mailto:kent_landfield@mcafee.com
<mailto:kent_landfield@mcafee.com%3e> >>

Date: Tue, 14 Feb 2012 15:32:38 -0600

To: Adam Montville <amontville@tripwire.com<mailto:amontville@tripwire.com
<mailto:amontville@tripwire.com%3e> >>,
<scap_interest@ietf.org<mailto:scap_interest@ietf.org
<mailto:scap_interest@ietf.org%3e> >>

Subject: Re: [scap_interest] Operational Aspects

Adam,

We have more than enough on our plate with the specification / I-D work.
Let's see if we can deal with this in a more appropriate forum. I do not see
this as that forum.  My 2cents.

Thanks.

Kent Landfield

Director Content Strategy, Architecture and Standards

McAfee | An Intel Company

5000 Headquarters Dr.

Plano, Texas 75024

Direct: +1.972.963.7096

Mobile: +1.817.637.8026

Web: www.mcafee.com<http://www.mcafee.com/>

From: Adam Montville <amontville@tripwire.com<mailto:amontville@tripwire.com
<mailto:amontville@tripwire.com%3e> >>

Date: Tue, 14 Feb 2012 15:12:51 -0600

To: "scap_interest@ietf.org<mailto:scap_interest@ietf.org
<mailto:scap_interest@ietf.org%3e> >"
<scap_interest@ietf.org<mailto:scap_interest@ietf.org
<mailto:scap_interest@ietf.org%3e> >>

Subject: [scap_interest] Operational Aspects

While we're all bantering about on security automation, there's another side
to the story.  Are there any operational concerns we might address within a
WG should one be formed?  For example, we have, in the United States, NVD
hosting a repository of information.  CCE identifiers are moderated and
assigned by an operational process.  As new enumerations are published and
new types of content are conceived, it's easy to imagine the need for some
operational standardization.

Should we consider standardizing some of these processes, and if so would
the WG we seek to establish be the appropriate place for that work?

Regards,

Adam W. Montville | Security and Compliance Architect

Direct: 503 276-7661

Mobile: 360 471-7815

TRIPWIRE | Take CONTROL

http://www.tripwire.com

_______________________________________________

scap_interest mailing list

scap_interest@ietf.org<mailto:scap_interest@ietf.org>

https://www.ietf.org/mailman/listinfo/scap_interest

_______________________________________________

scap_interest mailing list

scap_interest@ietf.org

https://www.ietf.org/mailman/listinfo/scap_interest

  _____  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.1913 / Virus Database: 2112/4813 - Release Date: 02/16/12