National Institute of Standards and Technology (NIST) - Information technology Laboratory (ITL)

Security Automation Developer Days Winter 2011 Presentations

Click here to download the specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 (DRAFT)

Day 1 (03/22/2011)

Presenter(s) Presentation
Charles Schmidt (MITRE) XCCDF Profiles
Jim Ronayne Expanded Applicability Language
Adam Halbardier (Booz Allen Hamilton) Briefing: Asset Identification and ARF
Charles Schmidt (MITRE) Advanced Tailoring and Automated Profile Selection
Charles Schmidt (MITRE) Other Open XCCDF Issues
Masato Terada (IPA) Briefing: SCAP activities in Japan
SCAP activities in Japan
Additional Materials

Day 2 (03/23/2011)

Presenter(s) Presentation
Dick Whitehurst (McAfee) XCCDF Findings
Charles Schmidt (MITRE) Other Open XCCDF Issues
David Waltermire (NIST), Paul Cichonski (NIST) Demo: Automation Content Repository
Kent Landfield (McAfee) Automation Content Repositories

Day 3 (03/24/2011)

Presenter(s) Presentation
Kent Landfield (McAfee) Content Development Best Practices
Gerry McGuire (MITRE)
Jon Baker (MITRE) Version 5.10 Goals
Matt Hansbury (MITRE) Integration of Asset Identification in OVAL
Joe Wolfkiel (DISA) Briefing: An Operational Implementation of CPE
Jasen Jacobsen (MITRE) Implement the Notion of One Test
Mike Lah (MITRE) OVAL Test Content
Charles Schmidt (MITRE) OVAL & TPM Demo and Discussion
Jon Baker (MITRE) variable_instance Attribute - Deprecate or Fix?
Ivan Kirillov (MITRE) MAEC & OVAL
SEI, SPAWAR Demo: DoD Remediation Reference Implementation
Steve Hanna (Juniper Networks) BoF: Using TNC and SCAP Together
Paul Bartock (NSA) TNC-SCAP Use Cases

Day 4 (03/25/2011)

Presenter(s) Presentation
Gerry McGuire (MITRE), Matthew Wojcik (MITRE) Remediations Standarization Discussion
Jeff Davenport (SEI) Standards-Based Automated Remediation A Remediation Manager Reference Implementation
Matthew Wojcik (MITRE) Remediation Discussion Issues
Matt Hansbury (MITRE) New Functions - unique, count, and others?
Danny Haynes (MITRE) mask Attribute - Deprecate or Fix?
Danny Haynes (MITRE) Error Handling in Variables