News & Events
October 1, 2009
Video Downloads of Benchmark Development Course Now Available
Free video downloads of each phase of MITRE’s Benchmark Development Course are now available on the Course Materials page. The seven videos include the following: Introduction: SCAP; Phase 1: Writing Good Guidance; Phase 2: Augmenting Guidance; Phase 3: Automating Assessment; Phase 4: Benchmark Structuring and Tailoring; Phase 5: Managing Compliance; and Conclusion.
Visit the Benchmark Development Course section for more information about the course or to register for an upcoming class.
September 18, 2009
Benchmark Development Course at IT Security Automation Conference 2009 on October 26
Our regular full-day session of the Benchmark Development Course will be included on the first day of the U.S. National Institute of Standards and Technology’s (NIST) 5th Annual IT Security Automation Conference on October 26, 2009 at the Baltimore Convention Center in Baltimore, Maryland, USA.
Contact benchmark@mitre.org for more information, and/or visit the Benchmark Development Calendar for information on this and other events.
Next Free Benchmark Development Course Scheduled for November 24-25
MITRE is scheduled to hold a Free Benchmark Development Course at MITRE Corporation in McLean, Virginia, USA on November 24-25, 2009.
The main purpose of the course is to share MITRE’s experience and knowledge with vendors, security content developers, and others on how to use industry standards and free tools to create automatable security guidance that helps system administrators configure and operate systems securely. How to create and use security configuration checklists expressed using Security Content Automation Protocol (SCAP) as defined in Draft Special Publication 800-117, Guide to Adopting and Using the Security Content Automation Protocol (SCAP) is also included.
Visit the Benchmark Development Course section for more information or to register.
September 4, 2009
Benchmark Development Course to Be Held at IT Security Automation Conference 2009, October 26-29
A session of the Benchmark Development Course will be included as part of the U.S. National Institute of Standards and Technology’s (NIST) 5th Annual IT Security Automation Conference on October 26-29, 2009 at the Baltimore Convention Center in Baltimore, Maryland, USA.
Contact benchmark@mitre.org for more information, and/or visit the Benchmark Development Calendar for information on this and other events.
August 19, 2009
Next Free Benchmark Development Course Scheduled for September 15-16
MITRE is scheduled to hold a Free Benchmark Development Course at MITRE Corporation in McLean, Virginia, USA on September 14-15, 2009.
The main purpose of the course is to share MITRE’s experience and knowledge with vendors, security content developers, and others on how to use industry standards and free tools to create automatable security guidance that helps system administrators configure and operate systems securely. How to create and use security configuration checklists expressed using Security Content Automation Protocol (SCAP) as defined in Draft Special Publication 800-117, Guide to Adopting and Using the Security Content Automation Protocol (SCAP) is also included.
Visit the Benchmark Development Course section for more information or to register.
NIST Launches "National Checklist Program Repository" Web Site
The U.S. National Institute of Standards and Technology’s (NIST) has a new National Checklist Program Repository Web site that is "the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications. NCP is migrating its repository of checklists to conform to the Security Content Automation Protocol (SCAP)."
July 17, 2009
OVAL Language Interpreter Updated to Version 5.5.25
MITRE’s OVAL Interpreter has been updated to Version 5.5, Build 25. A complete list of updates and fixes is available in the download bundle on the OVAL Interpreter Page on SourceForge.net.
Instruction on how to use the OVAL Interpreter is included in the Benchmark Development Course.
MITRE Hosts Security Automation Developer Days 2009
MITRE hosted the first-ever Security Content Developer Days 2009 on June 8-12, 2009, at MITRE in Bedford, Massachusetts, USA. This free five-day conference was technical in nature and focus on the U.S. National Institute of Standards and Technology’s (NIST) Security Content Automation Protocol (SCAP).
The purpose of the event was for the community to discuss SCAP in technical detail and to derive solutions that benefit all concerned parties. Discussion topics include NIST SP 800-126, SCAP content management, lifecycle, validation, and remediation; OVAL®, XCCDF, emerging specifications, and perceived gaps in standards coverage; ontology; and use cases.
See event photos:
For additional information visit the Developer Days page on the Making Security Measurable Web site.
Page Last Updated: October 1, 2009