Re: [scap_interest] SCE XCCDF

"Chernin, Michael A." <mchernin@dtcc.com> Fri, 24 February 2012 17:54 UTC

Return-Path: <mchernin@dtcc.com>
X-Original-To: scap_interest@ietfa.amsl.com
Delivered-To: scap_interest@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8B3421F8545; Fri, 24 Feb 2012 09:54:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.165
X-Spam-Level:
X-Spam-Status: No, score=-2.165 tagged_above=-999 required=5 tests=[AWL=0.434, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BioZhkV8R5OV; Fri, 24 Feb 2012 09:54:44 -0800 (PST)
Received: from sxinet05.dtcc.com (sxinet05.dtcc.com [207.45.45.43]) by ietfa.amsl.com (Postfix) with ESMTP id ADF4021F853E; Fri, 24 Feb 2012 09:54:44 -0800 (PST)
From: "Chernin, Michael A." <mchernin@dtcc.com>
To: "bchandra@secpod.com" <bchandra@secpod.com>, David Solin <david@joval.org>, "scap_interest-bounces@ietf.org" <scap_interest-bounces@ietf.org>, "scap_interest@ietf.org" <scap_interest@ietf.org>
Thread-Topic: [scap_interest] SCE XCCDF
Thread-Index: AQHM8xe+FVESPONVTkK6G8c4kSx0dpZMU3lw
Date: Fri, 24 Feb 2012 17:54:37 +0000
Message-ID: <E3EFB6C0D90F82478AF227AA85ECF38015AE2F43@SXEMBP01.corp.dtcc.com>
References: <4CDD66FA-4282-4DFC-8EB8-2E005E978368@c3isecurity.com> <4F47B2B9.4030706@joval.org> <66580539-1330103658-cardhu_decombobulator_blackberry.rim.net-988498293-@b28.c10.bise7.blackberry>
In-Reply-To: <66580539-1330103658-cardhu_decombobulator_blackberry.rim.net-988498293-@b28.c10.bise7.blackberry>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [172.18.113.13]
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: Re: [scap_interest] SCE XCCDF
X-BeenThere: scap_interest@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Discussion List for IETFers interested in the Security Content Automation Protocol \(SCAP\)." <scap_interest.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scap_interest>
List-Post: <mailto:scap_interest@ietf.org>
List-Help: <mailto:scap_interest-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Feb 2012 17:54:45 -0000

As a standards content consumer, I would prefer we implement whatever needs to be improved within the OVAL language. As to what needs to be improved, we should probably compile a list and discuss it.

Aharon

DTCC Non-Confidential (White)
---------------------------------------------------
Michael "Aharon" Chernin
Security Automation Program Manager
Corporate Information Security -Depository Trust & Clearing Corporation
O: 813-470-2173


> -----Original Message-----
> From: scap_interest-bounces@ietf.org [mailto:scap_interest-
> bounces@ietf.org] On Behalf Of Chandrashekhar B
> Sent: Friday, February 24, 2012 12:14 PM
> To: David Solin; scap_interest-bounces@ietf.org; scap_interest@ietf.org
> Subject: Re: [scap_interest] SCE XCCDF
> 
> This is an alternative option to cases where OVAL cannot be used to as a
> checking language. But there will always be confusion when to use what as
> the capabilities of OVAL improve. There is certainly one use case, to develop
> remote checks to determine vulnerabilities, assuming OVAL is not meant for
> that. Any effort to standardize this interface is good.
> 
> Thanks,
> Chandra.
> Sent from BlackBerry(r) on Airtel
> 
> -----Original Message-----
> From: David Solin <david@joval.org>;
> Sender: scap_interest-bounces@ietf.org
> Date: Fri, 24 Feb 2012 09:54:33
> To: <scap_interest@ietf.org>;
> Subject: Re: [scap_interest] SCE XCCDF
> 
> _______________________________________________
> scap_interest mailing list
> scap_interest@ietf.org
> https://www.ietf.org/mailman/listinfo/scap_interest
> 
> _______________________________________________
> scap_interest mailing list
> scap_interest@ietf.org
> https://www.ietf.org/mailman/listinfo/scap_interest
<BR>_____________________________________________________________
<FONT size=2><BR>
DTCC DISCLAIMER: This email and any files transmitted with it are
confidential and intended solely for the use of the individual or
entity to whom they are addressed. If you have received this email
in error, please notify us immediately and delete the email and any
attachments from your system. The recipient should check this email
and any attachments for the presence of viruses.  The company
accepts no liability for any damage caused by any virus transmitted
by this email.</FONT>