Developer Days

MITRE hosts OVAL Developer Days conferences each year at The MITRE Corporation in Bedford, Massachusetts. The purpose of the event is for the OVAL Community to discuss, in technical detail, the more difficult issues facing the current and future versions of OVAL and to derive solutions that benefit all concerned parties and continue the development of the OVAL Language.

Information about upcoming and/or past conferences is included below:

MITRE’s Security Automation Developer Days 2012

MITRE Corporation will host the fourth Security Automation Developer Days conference on July 9-13, 2012, at MITRE in Bedford, Massachusetts, USA. This five-day conference is technical in nature and focuses on the U.S. National Institute of Standards and Technology’s (NIST) Security Content Automation Protocol (SCAP).

The purpose of the event is for the community to discuss SCAP — and the existing standards upon which it is based including Open Vulnerability and Assessment Language (OVAL®), Common Platform Enumeration (CPE™), Common Configuration Enumeration (CCE™), Extensible Configuration Checklist Description Format (XCCDF), and Open Checklist Interactive Language (OCIL) — in technical detail and to derive solutions that benefit all concerned parties. All current and emerging SCAP standards are addressed at this workshop. MITRE first hosted Developer Days in 2005 and has been running them annually ever since. The model for these technical exchanges has since been adopted as the format used by the Security Automation community.

Registration now open: https://register.mitre.org/devdays/

Event agenda: TBA

IT Security Automation Conference 2011

OVAL was a main topic at the 7th Annual IT Security Automation Conference hosted by the National Institute of Standards and Technology, in conjunction with the Department of Homeland Security, National Security Agency, and Defense Information Systems Agency, on October 31 - November 2, 2011. This three-day event focused on the breadth and depth of automation principles and technologies designed to support automation requirements across organizations in multiple sectors.

OVAL downloads:

OVAL Workshop Slides (PDF, 1,264K)

For additional information and downloads, visit: http://www.nist.gov/itl/csd/7th-annual-scap-conference.cfm.

MITRE’s Security Automation Developer Days 2011

MITRE Corporation hosted the third Security Automation Developer Days conference on June 14-17, 2011, at MITRE in Bedford, Massachusetts, USA. This four-day conference is technical in nature and focuses on the U.S. National Institute of Standards and Technology’s (NIST) Security Content Automation Protocol (SCAP).

The purpose of the event is for the community to discuss SCAP — and the existing standards upon which it is based including Open Vulnerability and Assessment Language (OVAL®), Common Platform Enumeration (CPE™), Common Configuration Enumeration (CCE™), Extensible Configuration Checklist Description Format (XCCDF), and Open Checklist Interactive Language (OCIL) — in technical detail and to derive solutions that benefit all concerned parties. All current and emerging SCAP standards are addressed at this workshop. MITRE first hosted Developer Days in 2005 and has been running them annually ever since. The model for these technical exchanges has since been adopted as the format used by the Security Automation community.

Materials from the event include the following:

OVAL Status & Workshop Slides (ZIP, 4,247K)

OVAL Developer Days 2011 Minutes (PDF, 433K)

Security Automation Developer Days 2011 Agenda (PDF, 122K)

Security Automation Developer Days Spring 2011

The Security Automation Developer Days Spring 2011 conference was held March 22-25, 2011 at National Institute of Standards and Technology (NIST) in Gaithersburg, Maryland, USA.

The purpose of this event was for the community to discuss key security automation-related initiatives including Open Vulnerability and Assessment Language (OVAL®), Common Platform Enumeration (CPE™), Extensible Configuration Checklist Description Format (XCCDF), Open Checklist Interactive Language (OCIL), and Remediation in detail to further the development of these initiatives and to derive solutions that benefit all concerned parties. The conference, hosted by NIST, is a collaborative effort of NIST and the MITRE Corporation.

OVAL downloads:

OVAL Status & Workshop Slides (ZIP, 3096K)

OVAL Spring 2011 Developer Days Minutes (PDF, 79K)

Back to top

IT Security Automation Conference 2010

OVAL was a main topic at the 6th Annual IT Security Automation Conference hosted by the National Institute of Standards and Technology, in conjunction with the Department of Homeland Security, National Security Agency, and Defense Information Systems Agency, on September 27-29, 2010. This three-day event focused on the breadth and depth of automation principles and technologies designed to support automation requirements across organizations in multiple sectors.

OVAL downloads:

OVAL Tutorial Slides (PDF, 1340K)

OVAL Status Update Slides (PDF, 988K)

OVAL Workshop Slides (PDF, 940K)

OVAL Workshop Minutes (PDF, 398K)

MITRE’s Security Automation Developer Days 2010

MITRE Corporation hosted the second Security Automation Developer Days conference at which OVAL was a main topic on June 14-16, 2010, at MITRE in Bedford, Massachusetts, USA. The purpose of the three-day conference is for the community to discuss all current and emerging Security Content Automation Protocol (SCAP) standards in technical detail and to derive solutions that benefit all concerned parties. A brief technical overview of software assurance efforts sponsored by the Department of Homeland Security was also provided on the third day of the conference.

OVAL downloads:

OVAL Developer Days 2010 Slides (PDF, 458K)

OVAL and the Trusted Platform Module (PDF, 658K)

OVAL Developer Days 2010 Minutes (PDF, 933K)

For all downloads and additional information visit http://msm.mitre.org/participation/devdays.html#2010.

Back to top

MITRE’s Security Automation Developer Days 2009

This year, the annual OVAL Developer Days conference was incorporated into the first-ever Security Automation Developer Days 2009 conference held June 8-12, 2009 at MITRE in Bedford, Massachusetts, USA. OVAL was a main topic of this event.

OVAL downloads:

OVAL Developer Days 2009 Slides (PDF, 257K)
OVAL Developer Days 2009 Minutes (PDF, 591K)

For all downloads and additional information visit http://msm.mitre.org/participation/devdays.html.

OVAL Developer Days Conference — 2008

OVAL hosted its third Developer Days conference on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA. Specific talks included What Goes Into a Major Version, Merging the <affected> Element into the Criteria Section for Version 6, Definitions as the Focal Point, Reusing Content Across External Repositories, Supporting Network Devices, Repository and Reference Implementation Transition, Status of Stand-Alone Objects, Choice Structure, Agility in the OVAL Language, Future of OVAL Compatibility, Regular Expression Syntax, OVAL’s XML Footprint, and What Is Needed in a Remediation Language.


Materials from the event include the following:

Developer Days 2008 Agenda (PDF, 224K)
Developer Days Briefing Slides (ZIP, 4MB)
Developer Days 2008 Invitation (PDF, 93K)
Developer Days Minutes (PDF, 293K)

OVAL Developer Days Conference — 2006

OVAL hosted its second Developer Days conference July 11-12, 2006. Specific talks included A Look at Version 5, OVAL Repository Quality, XCCDF-P, OVAL Compatibility, and FISMA Turning Toward OVAL.

Materials from the event include the following:

Developer Days Meeting Agenda (PDF, 141K)
Developer Days Briefing Slides (ZIP, 591K)
Developer Days Minutes (PDF, 131K)
News & Photos (HTML)

OVAL Developer Days Conference — 2005

OVAL hosted its first-ever Developer Days conference July 18-19, 2005. Topics included OVAL Definitions, OVAL Schemas, OVAL Compatibility, OVAL Interpreter, and Web Services, among others.

Materials from the event include the following:

Developer Days Meeting Agenda (PDF, 117K)
Developer Days Briefing Slides (ZIP, 591K)
Developer Days Minutes (PDF, 119K)
News & Photos (HTML)

Back to top

Page Last Updated: May 09, 2012