Subject: [sacm] call for reviewers - Open Vulnerability and Assessment Language (OVAL)

From: "Romascanu, Dan (Dan)" <[email-masked]>
Date: Tue, 19 May 2015 09:14:54 +0000

Hi,

Following the virtual interim meeting last week we would like to have (at least) one SACM assigned reviewer looking into the Open Vulnerability and Assessment Language (OVAL).

High level information is available at https://oval.mitre.org/language/about<https://urldefense.proofpoint.com/v2/url?u=https-3A__oval.mitre.org_language_about&d=AwMFAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31OcNXCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=REOVf95kwnLqTRrb120zpmb41-IcLBXuXRAwLOTXxos&s=ayubIQr7aDe6bJoCx7GeDXUFqDToVRIWlXRZMGXLQxY&e=>. Schema and specifications are available at https://oval.mitre.org/language/version5.11/<https://urldefense.proofpoint.com/v2/url?u=https-3A__oval.mitre.org_language_version5.11_&d=AwMCAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31OcNXCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=MUHfUKfHsC8hfUXQ-bxxyEN2W9LVTTEy7CAgPa-0VsM&s=1sownZeCKsxx_gGSkisQnvMZx008sZOak2AEYNLiBgY&e=>.

The purpose of this assessment is to evaluate how OVAL meets the requirements for SACM and can fit into the SACM framework.

The timeline is until the next SACM interim meeting on June 29 or 30. Earlier would be appreciated.

Thanks and Regards,

Adam and Dan

---

From: Jerome Athias <[email-masked]>
Date: Tue, 19 May 2015 13:35:05 +0300

Hi,

I am familiar with OVAL.
Happy to help.

Cheers

2015-05-19 12:14 GMT+03:00 Romascanu, Dan (Dan) <[email-masked]>:
> Hi,
>
>
>
> Following the virtual interim meeting last week we would like to have (at
> least) one SACM assigned reviewer looking into the Open Vulnerability and
> Assessment Language (OVAL).
>
>
>
> High level information is available at
> https://oval.mitre.org/language/about. Schema and specifications are
> available at https://oval.mitre.org/language/version5.11/.
>
>
>
> The purpose of this assessment is to evaluate how OVAL meets the
> requirements for SACM and can fit into the SACM framework.
>
>
>
> _______________________________________________
> sacm mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/sacm
>

---

From: "Romascanu, Dan (Dan)" <[email-masked]>
Date: Tue, 19 May 2015 10:51:47 +0000

Thanks, Jerome!

Regards,

Dan

> -----Original Message-----
> From: Jerome Athias [mailto:[email-masked]]
> Sent: Tuesday, May 19, 2015 1:35 PM
> To: Romascanu, Dan (Dan)
> Cc: [email-masked]
> Subject: Re: [sacm] call for reviewers - Open Vulnerability and Assessment
> Language (OVAL)
> 
> Hi,
> 
> I am familiar with OVAL.
> Happy to help.
> 
> Cheers
> 
> > least) one SACM assigned reviewer looking into the Open Vulnerability
> > and Assessment Language (OVAL).
> >
> >
> >
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__oval.mitre.org_la
> >
> nguage_about&d=AwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31OcN
> XCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=wLzXaSKgcNr979v1vOs4hW8vQZwN
> AidC21bdRF94Ayo&s=EIhyrqnXbM21g-
> NxfWzzMeuWKAYjl9bzaJg9WYvdx0I&e= . Schema and specifications are
> available at https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__oval.mitre.org_language_version5.11_&d=AwIBaQ&c=BFpWQw8bsuKp
> l1SgiZH64Q&r=I4dzGxR31OcNXCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=wLzXa
> SKgcNr979v1vOs4hW8vQZwNAidC21bdRF94Ayo&s=DA25SAPG4FsvDpOezKT
> FQTWkYlmZ44ByawXJRd3Xn7U&e= .
> >
> >
> >
> > https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__www.ietf.org_mail
> >
> man_listinfo_sacm&d=AwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31
> OcNXCJf
> >
> QzvlsiLQfucBXRucPvdrphpBsFA&m=wLzXaSKgcNr979v1vOs4hW8vQZwNAidC
> 21bdRF94
> > Ayo&s=DvS6pcf-UGU2lX1VLR7PoT3w8ns8G0iwF-pbaQ6LvRc&e=
> >

---

From: Gunnar Engelbach <[email-masked]>
Date: Tue, 19 May 2015 10:03:53 -0400

I am very familiar with OVAL (and XCCDF, CPE, etc).  It's going to be 
very difficult to create enough time for this prior to June 29, but if 
this can be broken up into pieces, or I can act as a reviewer, I'll do 
what I can.

--gun

On 5/19/2015 5:14 AM, Romascanu, Dan (Dan) wrote:
>
> Hi,
>
> Following the virtual interim meeting last week we would like to have 
> (at least) one SACM assigned reviewer looking into the Open 
> Vulnerability and Assessment Language (OVAL).
>
> https://oval.mitre.org/language/about 
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__oval.mitre.org_language_about&d=AwMFAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31OcNXCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=REOVf95kwnLqTRrb120zpmb41-IcLBXuXRAwLOTXxos&s=ayubIQr7aDe6bJoCx7GeDXUFqDToVRIWlXRZMGXLQxY&e=>. 
> Schema and specifications are available at 
> https://oval.mitre.org/language/version5.11/ 
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__oval.mitre.org_language_version5.11_&d=AwMCAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=I4dzGxR31OcNXCJfQzvlsiLQfucBXRucPvdrphpBsFA&m=MUHfUKfHsC8hfUXQ-bxxyEN2W9LVTTEy7CAgPa-0VsM&s=1sownZeCKsxx_gGSkisQnvMZx008sZOak2AEYNLiBgY&e=>. 
>
>