National Institute of Standards and Technology (NIST) - Information technology Laboratory (ITL)

Security Automation Developer Days Winter 2011 Presentations

Click here to download the specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 (DRAFT)

March 22, 2011

Presenter(s) Presentation
Charles Schmidt, MITRE XCCDF Profiles
Jim Ronayne Expanded Applicability Language
Adam Halbardier, Booz Allen Hamilton Briefing: Asset Identification and ARF
Charles Schmidt, MITRE Advanced Tailoring and Automated Profile Selection
Charles Schmidt, MITRE Other Open XCCDF Issues
Masato Terada, IPA Briefing: SCAP activities in Japan
Additional Materials

March 23, 2011

Presenter(s) Presentation
Dick Whitehurst, McAfee XCCDF Findings
Charles Schmidt, MITRE Other Open XCCDF Issues
David Waltermire, NIST and Paul Cichonski, NIST Demo: Automation Content Repository
Kent Landfield, McAfee Automation Content Repositories

March 24, 2011

Presenter(s) Presentation
Kent Landfield, McAfee Content Development Best Practices
Gerry McGuire, MITRE OCIL in the Enterprise
Xacta Interview Tool
Jon Baker, MITRE Version 5.10 Goals
Matt Hansbury, MITRE Integration of Asset Identification in OVAL
Joe Wolfkiel, DISA Briefing: An Operational Implementation of CPE
Jasen Jacobsen, MITRE Implement the Notion of One Test
Mike Lah, MITRE OVAL Test Content
Charles Schmidt, MITRE OVAL & TPM Demo and Discussion
Jon Baker, MITRE variable_instance Attribute - Deprecate or Fix?
Ivan Kirillov, MITRE MAEC & OVAL
SEI and SPAWAR Demo: DoD Remediation Reference Implementation
Steve Hanna, Juniper Networks BoF: Using TNC and SCAP Together
Paul Bartock, NSA TNC-SCAP Use Cases

March 25, 2011

Presenter(s) Presentation
Gerry McGuire and Matthew Wojcik, MITRE Remediations Standarization Discussion
Jeff Davenport, SEI Standards-Based Automated Remediation A Remediation Manager Reference Implementation
Matthew Wojcik, MITRE Remediation Discussion Issues
Matt Hansbury, MITRE New Functions - unique, count, and others?
Danny Haynes, MITRE mask Attribute - Deprecate or Fix?
Danny Haynes, MITRE Error Handling in Variables