OVAL® International in scope and free for public use, OVAL is an information security community effort to standardize how to assess and report upon the machine state of computer systems. OVAL includes a language to encode system details, and an assortment of content repositories held throughout the community.

Tools and services that use OVAL for the three steps of system assessment — representing system information, expressing specific machine states, and reporting the results of an assessment — provide enterprises with accurate, consistent, and actionable information so they may improve their security. Use of OVAL also provides for reliable and reproducible information assurance metrics and enables interoperability and automation among security tools and services.

	Related Efforts Vulnerabilities (CVE) Configurations (CCE) Platforms (CPE) Software Weakness Types (CWE) Attack Patterns (CAPEC) Cyber Observables (CybOX) Checklist Language (XCCDF) Log Format (CEE) Malware (MAEC) Security Content Automation (SCAP) Build Security In Making Security Measurable

Focus On

Play in the OVAL Language Sandbox!

We invite members of the OVAL Community to visit the OVAL Language Sandbox on GitHub.com to propose and develop new and experimental capabilities for the OVAL Language in a new and collaborative environment.

By fully investigating and implementing new capabilities first in the Sandbox before they are included in an official release of OVAL Language, we can ensure that only mature and implementable constructs are added to the OVAL Language even as the effort continuously evolves and stays current with new and emerging technologies.

Join us in the OVAL Language Sandbox now at https://github.com/OVALProject/Sandbox.

Page Last Updated: May 11, 2012