http://oval.mitre.org/news/index.html OVAL news headlines for the latest compatible products, data and schema updates, upcoming conferences, new Web site features, OVAL in the news, etc. en-us oval@mitre.org Tue, 28 Apr 2015 15:00 EDT http://oval.mitre.org/news/index.html#july92015_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q2_2015 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q2-2015. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Thur, 09 Jul 2015 20:00 EDT http://oval.mitre.org/news/index.html#july92015_OVAL_Board_holds_9th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on June 1, 2015. Discussion topics included a set of possible actions now available, using the new proposal, such as standing up new mailing lists and creating a GitHub-oriented OVAL Repository that could mimic current functionality without using MITRE-copyrighted code. A subcommittee was formed to finalize the proposal and notify the community of upcoming changes. Read the meeting minutes. Thur, 09 Jul 2015 20:00 EDT http://oval.mitre.org/news/index.html#july92015_OVAL_Board_holds_8th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on May 18, 2015. Discussion topics included a new resource-oriented OVAL transition plan and an update for a recent interim IETF SACM Working Group meeting. Read the meeting minutes. Thur, 09 Jul 2015 20:00 EDT http://oval.mitre.org/news/index.html#july92015_OVAL_Board_holds_7th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on May 11, 2015. Discussion topics included a review of alternative courses to a previously proposed funding option and the actions required prior to transitioning the OVAL Repository. Read the meeting minutes. Thur, 09 Jul 2015 20:00 EDT http://oval.mitre.org/news/index.html#july92015_OVAL_Board_holds_6th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on April 27, 2015. Discussion topics included establishing MITRE's role within SACM, the minimal set of tasking required to maintain OVAL, new mailing list options, and how the OVAL website will handle the transition. Read the meeting minutes. Thur, 09 Jul 2015 20:00 EDT http://oval.mitre.org/news/index.html#april282015_OVAL_Board_holds_Q2_2015_Call The OVAL Board held a teleconference meeting on April 13, 2015. Discussion topics included status updates on the OVAL Language and OVAL Repository; additional changes requested for the OVAL 5.11.1 Language release; ongoing efforts by the Security Automation and Continuous Monitoring (SACM) working group; news on a whitepaper mapping OVAL to the SACM Information Model; and the overall transition status. Read the meeting minutes. Tues, 28 Apr 2015 20:00 EDT http://oval.mitre.org/news/index.html#april282015_ToolsWatch_Makes_Declaration_to_Adopt_OVAL ToolsWatch declared that its correlated vulnerability database product, vFeed API and Vulnerability Database Community, incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Tues, 28 Apr 2015 20:00 EDT http://oval.mitre.org/news/index.html#april282015_ScriptRock_Makes_Declaration_to_Adopt_OVAL ScriptRock declared that its OVAL Definition Evaluator product, Universal System Scanner, incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Tues, 28 Apr 2015 20:00 EDT http://oval.mitre.org/news/index.html#april222015_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q1_2015 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q1-2015. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Wed, 22 Apr 2015 15:00 EDT http://oval.mitre.org/news/index.html#april222015_Version_5.11.1_of_OVAL_Now_Available Version 5.11.1 fixes three critical bugs in the Core schemas and addresses multiple platform Schematron issues affecting the Core. The generator schema_version element received improved documentation and the introduction of a "platform" attribute. The NotesType reverts a backwards incompatibility introduced in OVAL Version 5.11. The GlobToRegex OVAL Function received improvements and corrections to the existing documentation. New to Version 5.11.1 is an optional check_existence attribute for OVAL State entities, and the “debian_evr_string” simple datatype. Wed, 22 Apr 2015 15:00 EDT http://oval.mitre.org/news/index.html#march272015_OVAL_Board_holds_5th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on March 9, 2015. Discussion topics included a follow-up to funding options and required tasks to maintain OVAL under a new moderator. Read the meeting minutes. Fri, 27 Mar 2015 15:00 EDT http://oval.mitre.org/news/index.html#march272015_OVAL_Board_holds_4th_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on March 2, 2015. Discussion topics included possible funding options for a new moderator, and determining the necessity of maintaining the OVAL Interpreter reference implementation. Read the meeting minutes. Fri, 27 Mar 2015 15:00 EDT http://oval.mitre.org/news/index.html#march272015_OVAL_Board_holds_3rd_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on February 16, 2015. Discussion topics included a review of the moderator responsibilities that a new owner would be able to continue, and a revision to the separate versioning policy. Read the meeting minutes. Fri, 27 Mar 2015 15:00 EDT http://oval.mitre.org/news/index.html#february022015_OVAL_Board_holds_2nd_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on February 02, 2015. Discussion topics included a second review of the remaining transition tasks, and the feasibility of a new or existing organization becoming the OVAL moderator. Read the meeting minutes. Wed, 13 Feb 2015 15:00 EDT http://oval.mitre.org/news/index.html#january262015_OVAL_Board_holds_Transition_Follow_Up_Call The OVAL Board held a teleconference meeting on January 26, 2015. Discussion topics included a brief review of the remaining transition tasks, and a comparison of governance models under consideration for the OVAL Language. Read the meeting minutes. Wed, 13 Feb 2015 15:00 EDT http://oval.mitre.org/news/index.html#january122015_OVAL_Board_holds_Q1_2015_Call The OVAL Board held a teleconference meeting on January 12, 2015. Discussion topics included status updates on the OVAL Language, OVAL Repository, and OVAL Interpreter; defects with the OVAL 5.11 Language release; ongoing efforts by the Security Automation and Continuous Monitoring (SACM) working group; and a listing of further transition tasks. Read the meeting minutes. Wed, 13 Feb 2015 15:00 EDT http://oval.mitre.org/news/index.html#january072015_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q4-2014 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q4-2014. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Wed, 07 Jan 2015 15:00 EDT http://oval.mitre.org/news/index.html#november042014_OVAL_Board_Holds_Teleconference_Meeting The "OVAL Board Holds Teleconference Meeting" item looks good. The "Meeting Minutes from Security Automation Workshop Now Available" still has the copy/paste issue. I would replace that with "Meeting minutes from the Security Automation Workshop held on August 26-28, 2014 at MITRE Corporation in McLean, Virginia, USA are now available on the OVAL Web site." Tues, 04 Nov 2014 15:00 EDT http://oval.mitre.org/news/index.html#november042014_/news/index.html#november042014_Meeting_Minutes_from_Security_Automation_Workshop_Now_Available Meeting minutes from the Security Automation Workshop held on August 26-28, 2014 at MITRE Corporation in McLean, Virginia, USA are now available on the OVAL Web site. Tues, 04 Nov 2014 15:00 EDT http://oval.mitre.org/news/index.html#october072014_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q3-2014 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q3-2014. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Tues, 07 Oct 2014 15:00 EDT http://oval.mitre.org/news/index.html#july312014_Security_Automation_Workshop_2014 Security Automation Workshop 2014, hosted at MITRE Corporation in McLean, Virginia, USA on August 26-28, 2014, will bring government and industry together in order to develop a consensus way forward for the endpoint posture assessment standards being developed in the Internet Engineering Task Force (IETF) Security Automation Continuous Monitoring (SACM) Working Group. Thurs, 31 Jul 2014 15:00 EDT http://oval.mitre.org/news/index.html#july312014_Two_New_OVAL_Board_Members_for_HP Chandan M C and Evani Prasad of Hewlett-Packard Development Company, L.P. have joined the OVAL Board. Thurs, 31 Jul 2014 15:00 EDT http://oval.mitre.org/news/index.html#july312014_New_OVAL_Board_Member_for_Tripwire Adam Montville of Tripwire, Inc. has joined the OVAL Board. Thurs, 31 Jul 2014 15:00 EDT http://oval.mitre.org/news/index.html#july312014_OVAL_Board_Holds_Teleconference_Meeting The OVAL Board held a teleconference meeting on July 14, 2014. Discussion topics included status updates on the OVAL Language, OVAL Repository, OVAL Interpreter, and OVAL Adoption Program, the Security Automation and Continuous Monitoring (SACM) information model, and an unofficial extensions in OVAL follow-up. Read the meeting minutes. Thurs, 31 Jul 2014 15:00 EDT http://oval.mitre.org/news/index.html#jul092014_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q2-2014 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q2-2014. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Wed, 09 Jul 2014 15:00 EDT http://oval.mitre.org/news/index.html#jun192014_Tripwire_Posts_OVAL_Adoption_Questionnaire_to_Become_Official_OVAL_Adopter Tripwire, Inc. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Tripwire Enterprise. Thurs, 19 Jun 2014 15:00 EDT http://oval.mitre.org/news/index.html#jun192014_New_OVAL_Board_Member_for_Cisco Panos Kampanakis of Cisco Systems, Inc. has joined the OVAL Board. Thurs, 19 Jun 2014 15:00 EDT http://oval.mitre.org/news/index.html#jun192014_New_OVAL_Board_Member_for_NIST Melanie Cook of U.S. National Institute of Standards and Technology (NIST) has joined the OVAL Board. She replaces Stephen Quinn, who has left the Board. Thurs, 19 Jun 2014 15:00 EDT http://oval.mitre.org/news/index.html#jun102014_New_Net_Technologies_Makes_Declaration_to_Adopt_OVAL New Net Technologies, Ltd. declared that its enterprise change and configuration management product, NNT Change Tracker Enterprise, incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Tues, 10 Jun 2014 15:00 EDT http://oval.mitre.org/news/index.html#may222014_OVAL_Board_Holds_Teleconference_Meeting The OVAL Board held a teleconference meeting on April 28, 2014. Discussion topics included status updates on the OVAL Language, OVAL Repository, OVAL Interpreter, and OVAL Adoption Program, and unofficial extensions in OVAL. Read the meeting minutes. Wed, 22 May 2014 15:00 EDT http://oval.mitre.org/news/index.html#may222014_OVAL_Referenced_in_Article_about_Cyber_Threat_Information_Sharing_on_FederalBluePrint.com OVAL is referenced in a March 18, 2014 article entitled "How the Department of Defense and the Department of Homeland Security Are Taking Steps Toward Information Sharing" on FederalBluePrint.com. Wed, 22 May 2014 15:00 EDT http://oval.mitre.org/news/index.html#news/index.html#may142014_OVAL_Board_Holds_Teleconference_Meeting The OVAL Board held a teleconference meeting on April 14, 2014. The main focus of the meeting was a discussion with Kim Watson of the U.S. Department of Homeland Security (DHS) about the change in direction for MITRE's role in OVAL. DHS is the sponsor of OVAL. Read the meeting minutes. Wed, 14 May 2014 15:00 EDT http://oval.mitre.org/news/index.html#apr242014_SUSE_Makes_Declaration_to_Adopt_OVAL SUSE declared that its Linux patch and configuration management tool, SUSE Manager, incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Thur, 24 Apr 2014 15:00 EDT http://oval.mitre.org/news/index.html#apr102014_OVAL_Interpreter_Updated_to_Version_5.10.1.7 The OVAL Interpreter and its source code have been updated to Version 5.10.1.7. Specific updates to the OVAL Interpreter included fixing the import of Directives and Definition evaluation-id files, adding support for 64-bit RPMs, and fixing some issues reported by the OVAL Community. Thur, 10 Apr 2014 15:00 EDT http://oval.mitre.org/news/index.html#apr022014_OVAL_Repository_Announces_Top_Contributors_Awards_for_Q1-2014 ALTX-SOFT, Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q1-2014. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Wed, 02 Apr 2014 15:00 EDT http://oval.mitre.org/news/index.html#apr022014_OVAL_Board_Voting_Archive_Added_to_OVAL_Website An OVAL Board Voting Archive of decisions made by the OVAL Board for additions, refinements, and deprecations to the OVAL Language has been added to the OVAL Community section. The archive provides a high-level overview of the final voting results for each issue, along with a link to a detailed summary of the issue being voted upon, a record of the voting, and the final outcome of the vote. Wed, 02 Apr 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_Center_for_Internet_Security_Posts_OVAL_Adoption_Questionnaire_to_Become_Official_OVAL_Adopter Center for Internet Security achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Center for Internet Security Configuration Assessment Tool (CIS-CAT). Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_SPAWAR_Posts_OVAL_Adoption_Questionnaire_to_Become_Official_OVAL_Adopter SPAWAR Systems Center Atlantic achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for SCAP Compliance Checker. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_Altex-Soft_Technologies_Posts_OVAL_Adoption_Questionnaire_to_Become_Official_OVAL_Adopter Altex-Soft achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for RedCheck. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_Agiliance_Makes_Declaration_to_Adopt_OVAL Agiliance declared that its big data risk management software, Agiliance RiskVision, incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_SUSE_Makes_Declaration_to_Adopt_OVAL SUSE declared that its SUSE Linux Enterprise OVAL Information database incorporates OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_New_OVAL_Board_Member_for_Assuria Chris Wood of Assuria Limited has joined the OVAL Board. He replaces Nick Connor, who has left the Board. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_New_OVAL_Board_Member_for_IBM Rosario Gangemi of IBM Corporation has joined the OVAL Board. She replaces Eric Walker, who has left the Board. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_New_OVAL_Board_Member_for_Qualys Tigran Gevorgyan of Qualys, Inc. has joined the OVAL Board. He replaces Amol Sarwate, who has left the Board. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#mar032014_New_OVAL_Board_Member_for_Red_Hat Kurt Seifried of Red Hat, Inc. has joined the OVAL Board. He replaces Mark Cox, who has left the Board. Mon, 03 Mar 2014 15:00 EDT http://oval.mitre.org/news/index.html#feb012014a The OVAL Repository surpassed the 20,000 OVAL Definitions milestone on January 23, 2014 with a new grand total of 20,007 definitions now available to the public on the OVAL Web site for a wide variety of platforms including UNIX, Windows, Mac OS, IOS, and PIX IOS. Fri, 01 Feb 2014 15:00 EDT http://oval.mitre.org/news/index.html#feb012014b SecPod Technologies achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for SecPod Saner. Fri, 01 Feb 2014 15:00 EDT http://oval.mitre.org/news/index.html#feb012014c ADTsys Software declared that its ADTsys Cloud Security will incorporate OVAL. For additional information about this and other products using OVAL, visit the OVAL Adoption Program section. Fri, 01 Feb 2014 15:00 EDT http://oval.mitre.org/news/index.html#feb012014d Meeting minutes for the OVAL Board teleconference meeting held on January 6, 2014 have been posted in the OVAL Community section. Fri, 01 Feb 2014 15:00 EDT http://oval.mitre.org/news/index.html#jan102014a The OVAL Interpreter and its source code have been updated to Version 5.10.1.6. Specific updates to the OVAL Interpreter included updating Xerces to version 3.1.1, updating Xalan to version 1.11, and fixing some issues reported by the OVAL Community. Fri, 10 Jan 2014 15:00 EDT http://oval.mitre.org/news/index.html#jan102014b The OVAL Board held a teleconference meeting on January 6, 2014. Discussion topics included status updates on the OVAL Language, OVAL Repository, and OVAL Interpreter; the OVAL Language Sandbox Proposal Form; and a proposal to version the core and components of the OVAL Language separately. Meeting minutes will be posted when available. Fri, 10 Jan 2014 15:00 EDT http://oval.mitre.org/news/index.html#jan022014a ALTX-SOFT, G2, Inc., Hewlett-Packard Development Company, L.P., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q4-2013. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Thur, 02 Jan 2014 15:00 EDT http://oval.mitre.org/news/index.html#dec132013a The updated OVAL Authoring Style Checker document, which is a set of Schematron rules developed to check OVAL Definitions for compliance with the OVAL Repository Style Guide, is now available in the OVAL Repository section of the OVAL Web site. Fri, 13 Dec 2013 15:00 EDT http://oval.mitre.org/news/index.html#dec132013b The OVAL Board held a teleconference meeting on December 9, 2013. Fri, 13 Dec 2013 15:00 EDT http://oval.mitre.org/news/index.html#nov212013a David Solin of jOVAL.org has joined the OVAL Board. Thu, 21 Nov 2013 15:00 EDT http://oval.mitre.org/news/index.html#nov212013b Jamie Cromer of Symantec Corporation has joined the OVAL Board. Thu, 21 Nov 2013 15:00 EDT http://oval.mitre.org/news/index.html#nov212013c Jack Vander Pol of SPAWAR, U.S. Navy has joined the OVAL Board. Thu, 21 Nov 2013 15:00 EDT http://oval.mitre.org/news/index.html#nov212013d The OVAL Test Content downloads will now be hosted on the GitHub.com Web site. Thu, 21 Nov 2013 15:00 EDT http://oval.mitre.org/news/index.html#oct252013a Three new process documents have been added to the OVAL Board page in the Community section: "OVAL Board Member Roles, Tasks, Qualifications, and Authority," "OVAL Board Voting Process," and "Processes for Adding, Transferring, and Removing OVAL Board Members." Fri, 25 Oct 2013 15:00 EDT http://oval.mitre.org/news/index.html#oct252013b Meeting minutes for the OVAL Board teleconference meeting held on Monday, October 7, 2013 have been posted in the Community section. Fri, 25 Oct 2013 15:00 EDT http://oval.mitre.org/news/index.html#oct032013a ALTX-SOFT, G2, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q3-2013. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Thu, 03 Oct 2013 15:00 EDT http://oval.mitre.org/news/index.html#oct032013b Meeting minutes from the OVAL sessions at Developer Days 2013 held on July 22-24, 2013 at MITRE Corporation in McLean, Virginia, USA are now available in the OVAL Community section. Thu, 03 Oct 2013 15:00 EDT http://oval.mitre.org/news/index.html#sep252013a Draft 2 of Version 5.11 of the OVAL Language is now available on the OVAL Web site. Wed, 25 Sep 2013 15:00 EDT http://oval.mitre.org/news/index.html#sep252013b Beyond Security Ltd. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for AVDS. Wed, 25 Sep 2013 15:00 EDT http://oval.mitre.org/news/index.html#aug282013a Meeting minutes for the OVAL Board teleconference meeting held on Monday, July 8, 2013 have been posted in the Community section. Wed, 28 Aug 2013 15:00 EDT http://oval.mitre.org/news/index.html#aug132013a Beyond Security Ltd. declared that its vulnerability and configuration assessment and management tool, AVDS, incorporates OVAL. Tue, 13 Aug 2013 15:00 EDT http://oval.mitre.org/news/index.html#aug132013b MITRE hosted a "Strengthening Cyber Defense" booth that included OVAL at Black Hat Briefings 2013 at Caesar’s Palace in Las Vegas, Nevada, USA, on July 27 – August 1, 2013. Tue, 13 Aug 2013 15:00 EDT http://oval.mitre.org/news/index.html#jul312013a MITRE Corporation hosted Developer Days 2013 on July 22-24, 2013 at MITRE in McLean, Virginia, USA. The three-day event, which focused primarily on the OVAL effort, remediation, and continuous monitoring and risk scoring (CMRS), was a success and we thank all who participated. Wed, 31 Jul 2013 15:00 EDT http://oval.mitre.org/news/index.html#jul192013a The final event agenda for MITRE’s free Developer Days 2013 conference scheduled for July 22-24, 2013 at MITRE in McLean, Virginia, USA is now available at https://oval.mitre.org/community/docs/Developer_Days_2013_Agenda.pdf. Fri, 19 Jul 2013 15:00 EDT http://oval.mitre.org/news/index.html#jul122013a Registration is now closed for MITRE’s free Developer Days 2013 event scheduled for July 22-24, 2013 at MITRE in McLean, Virginia, USA. Fri, 12 Jul 2013 7:00 EDT http://oval.mitre.org/news/index.html#jul122013b The OVAL Board held a teleconference meeting on July 8, 2013. Fri, 12 Jul 2013 7:00 EDT http://oval.mitre.org/news/index.html#jul022013a ALTX-SOFT, G2, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q2-2013. Tues, 2 Jul 2013 7:45 EDT http://oval.mitre.org/news/index.html#jul022013b MITRE will host a "Strengthening Cyber Defense" booth that includes OVAL at Black Hat Briefings 2013 at Caesar’s Palace in Las Vegas, Nevada, USA, on July 27 - August 1, 2013. Tues, 2 Jul 2013 7:45 EDT http://oval.mitre.org/news/index.html#jun262013a The agenda for MITRE’s free Developer Days 2013 conference scheduled for July 22-24, 2013 at MITRE in McLean, Virginia, USA is now available. Wed, 26 Jun 2013 8:00 EDT http://oval.mitre.org/news/index.html#jun212013a The OVAL Repository surpassed the 15,000 OVAL Definitions milestone on June 21, 2013 with a new grand total of 15,105 definitions now available to the public on the OVAL Web site for a wide variety of platforms including Windows, Red Hat, Solaris, SUSE, Cisco IOS, and Mac OS. Fri, 21 Jun 2013 12:00 EDT http://oval.mitre.org/news/index.html#jun212013b MITRE Corporation will host the fifth Developer Days event on July 22-24, 2013, at MITRE in McLean, Virginia, USA. Fri, 21 Jun 2013 12:00 EDT http://oval.mitre.org/news/index.html#jun192013a NopSec, Inc. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for NopSec Unified Vulnerability Risk Management (VRM). Wed, 19 Jun 2013 15:00 EDT http://oval.mitre.org/news/index.html#jun072013b GCP Global achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for ORCA. Fri, 7 Jun 2013 15:00 EDT http://oval.mitre.org/news/index.html#may082013a Information-technology Promotion Agency, Japan (IPA) achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for MyJVN AP. Wed, 8 May 2013 8:00 EDT http://oval.mitre.org/news/index.html#may082013b MITRE hosted an "OVAL for Android" teleconference meeting on May 6, 2013 for the OVAL Community. Wed, 8 May 2013 8:00 EDT http://oval.mitre.org/news/index.html#may082013c Meeting minutes for the OVAL Board teleconference meeting held on Monday, April 29, 2013, which was a follow-up to the OVAL Board Meeting held on April 8, 2013, have been posted in the Community section. Wed, 8 May 2013 8:00 EDT http://oval.mitre.org/news/index.html#apr262013a Since last year’s Developer Days event, the OVAL Team has been actively working to expand upon the Android schemas in the OVAL Language Sandbox as well as to develop a proof-of-concept Android application that produces the system-characteristics for an Android device. Fri, 26 Apr 2013 8:00 EDT http://oval.mitre.org/news/index.html#apr262013b OVAL Board member Cisco Systems, Inc. hosted a webinar on April 23, 2013 entitled "Security Automation Live" that included OVAL as a main discussion topic. Fri, 26 Apr 2013 8:00 EDT http://oval.mitre.org/news/index.html#apr262013c Meeting minutes for the OVAL Board teleconference meeting held on Monday, April 8, 2013 have been posted in the Community section. Fri, 26 Apr 2013 8:00 EDT http://oval.mitre.org/news/index.html#apr172013a The OVAL Interpreter and its source code have been updated to Version 5.10.1.5. Wed, 14 Apr 2013 7:00 EDT http://oval.mitre.org/news/index.html#apr172013b The OVAL Board held a teleconference meeting on April 8, 2013. Wed, 14 Apr 2013 7:00 EDT http://oval.mitre.org/news/index.html#apr172013e Pat Fetty of Microsoft Corporation has joined the OVAL Board. Wed, 14 Apr 2013 7:00 EDT http://oval.mitre.org/news/index.html#apr172013c MITRE hosted a "Strengthening Cyber Defense" booth that included OVAL at InfoSec World Conference & Expo 2013 at Walt Disney World Swan and Dolphin in Orlando, Florida, USA, on April 15-17, 2013. Wed, 14 Apr 2013 7:00 EDT http://oval.mitre.org/news/index.html#apr172013d MITRE Senior Information Assurance Engineer Luis Nunez was a guest speaker on the topic of Industry Collaboration in a webinar entitled "Automating Security Compliance & Operations to Protect Critical Infrastructure" on April 9, 2013. Wed, 14 Apr 2013 7:00 EDT http://oval.mitre.org/news/index.html#apr042013a ALTX-SOFT, G2, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q1-2013. Thurs, 4 Apr 2013 17:45 EDT http://oval.mitre.org/news/index.html#apr042013b MITRE Senior Information Assurance Engineer Luis Nunez will be a guest speaker on the topic of Industry Collaboration in a webinar entitled "Automating Security Compliance & Operations to Protect Critical Infrastructure" on April 9, 2013 from 1:00 pm - 2:00 pm, EDTime. Thurs, 4 Apr 2013 17:45 EDT http://oval.mitre.org/news/index.html#apr042013c MITRE hosted a "Strengthening Cyber Defense" booth that included OVAL at RSA Conference 2013 at the Moscone Center in San Francisco, California, USA, on February 25 - March 1, 2013. Thurs, 4 Apr 2013 17:45 EDT http://oval.mitre.org/news/index.html#mar082013a MITRE will host a "Strengthening Cyber Defense" booth that includes OVAL at InfoSec World Conference & Expo 2013 at Walt Disney World Swan and Dolphin in Orlando, Florida, USA, on April 15-17, 2013. Fri, 8 Mar 2013 15:00 EDT http://oval.mitre.org/news/index.html#mar082013b MITRE hosted a "Strengthening Cyber Defense" booth that included OVAL at RSA Conference 2013 at the Moscone Center in San Francisco, California, USA, on February 25 - March 1, 2013. Fri, 8 Mar 2013 15:00 EDT http://oval.mitre.org/news/index.html#mar082013c The OVAL Board held an informal face-to-face meeting on February 26, 2013 at RSA Conference 2013 in San Francisco, California, USA to discuss a potential transfer of the OVAL Language to a formal standards body. Fri, 8 Mar 2013 15:00 EDT http://oval.mitre.org/news/index.html#feb202013a A Draft of Version 5.10.1 of the OVAL Language is now available on the OVAL Web site. Wed, 20 Feb 2013 8:30 EDT http://oval.mitre.org/news/index.html#feb202013b The OVALProject Language Repository is now available on Github.com. Wed, 20 Feb 2013 8:30 EDT http://oval.mitre.org/news/index.html#feb202013c Institute for Information Industry - CyberTrust Technology Institute achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Crystal Security Keeper (CSK). Wed, 20 Feb 2013 8:30 EDT http://oval.mitre.org/news/index.html#feb202013e ATM Software sp. z o.o. declared that its server/software lifecycle management with OVAL repository and vulnerability assessment, ATM Information Security Workflow, will incorporate OVAL. Wed, 20 Feb 2013 8:30 EDT http://oval.mitre.org/news/index.html#feb202013d The updated OVAL Introductory Flyer, which is a brief two-page introduction to the OVAL effort, is now available on the Documents page. Wed, 20 Feb 2013 8:30 EDT http://oval.mitre.org/news/index.html#feb072013a MITRE is scheduled to host an OVAL/Making Security Measurable booth at RSA Conference 2013 at the Moscone Center in San Francisco, California, USA, on February 25 - March 1, 2013. Thurs, 7 Feb 2013 8:00 EDT http://oval.mitre.org/news/index.html#feb072013b A Related Efforts page has been added to the Community section of the OVAL Web site. Thurs, 7 Feb 2013 8:00 EDT http://oval.mitre.org/news/index.html#jan252013a The OVAL Board held a teleconference meeting on January 14, 2013. Fri, 25 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#jan252013b William Munyan of Center for Internet Security has joined the OVAL Board. Fri, 25 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#jan112013a The OVAL Interpreter and its source code have been updated to Version 5.10.1.4. Fri, 11 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#jan112013b Steven Piliero of Unified Compliance has joined the OVAL Board. Fri, 11 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#jan042013a MITRE has announced its initial Making Security Measurable calendar of events for 2013. Fri, 4 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#jan042013b ALTX-SOFT, G2, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q4-2012. Fri, 4 Jan 2013 7:30 EDT http://oval.mitre.org/news/index.html#dec192012a Institute for Information Industry - CyberTrust Technology Institute declared that its vulnerability assessment, configuration management, auditing, and centralized audit validation product, Crystal Security Keeper (CSK), incorporates OVAL. Wed, 19 Dec 2012 8:30 EDT http://oval.mitre.org/news/index.html#dec102012a OVAL began 10 years ago this month as a new community standard for how vulnerabilities could be identified on local computers. Mon, 10 Dec 2012 8:30 EDT http://oval.mitre.org/news/index.html#dec102012b Pivotal Security LLC declared that its Security Scanning SDK product incorporates OVAL. Mon, 10 Dec 2012 8:30 EDT http://oval.mitre.org/news/index.html#nov012012a The OVAL Board held a teleconference meeting on October 15, 2012. Thurs, 1 Nov 2012 13:45 EDT http://oval.mitre.org/news/index.html#nov012012b The OVAL Interpreter page on the OVAL Web site has been updated to help further clarify that the OVAL Interpreter, which is offered under a BSD License, is not an enterprise scanning tool but a simplistic command-line interface that has the ability to execute OVAL content on an end system. Thurs, 1 Nov 2012 13:45 EDT http://oval.mitre.org/news/index.html#nov012012c MITRE hosted an OVAL/Making Security Measurable booth at IT Security Automation Conference 2012 on October 3-5, 2012 at Baltimore Convention Center in Baltimore Inner Harbor, Maryland, USA. Thurs, 1 Nov 2012 13:45 EDT http://oval.mitre.org/news/index.html#oct012012a G2, Inc. and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q3-2012. Mon, 1 Oct 2012 13:15 EDT http://oval.mitre.org/news/index.html#sep282012a Cisco Systems, Inc. is now listed on the Other Repositories page in the OVAL Repository section for its repository Cisco IOS Security Advisories in the standardized Common Vulnerability Reporting Format (CVRF) that include OVAL Vulnerability Definitions. Fri, 28 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep282012b GCP Global declared that its Web-based Governance, Risk, and Compliance (GRC) solution, ORCA, incorporates OVAL. Fri, 28 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep282012c The OVAL Interpreter and its source code have been updated to Version 5.10.1.3. Fri, 21 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep282012d A new release of the OVAL Test Content is now available on the OVAL Test Content Page on SourceForge.net. Fri, 21 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep282012e A new release of the OVAL Utilities is now available on the OVAL Utilities Page on SourceForge.net. Fri, 21 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep172012a AIST achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for SIX OVAL. Mon, 17 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep172012f OVAL/Making Security Measurable booth at IT Security Automation Conference 2012 on October 3-5, 2012 at Baltimore Convention Center in Baltimore Inner Harbor, Maryland, USA. Mon, 17 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep172012g Meeting minutes from the Security Automation Developer Days 2012 conference held on July 9-13, 2012 at MITRE Corporation in Bedford, Massachusetts, USA are now available on the Making Security Measurable Web site, and includes those from the four OVAL-focused sessions. Mon, 17 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#sep172012e MITRE hosted an OVAL/Making Security Measurable booth at 2012 Information Assurance Expo on August 27-30, 2012 at Gaylord Opryland Resort and Convention Center in Nashville, Tennessee, USA. Mon, 17 Sep 2012 7:30 EDT http://oval.mitre.org/news/index.html#aug162012a Lunarline, Inc. declared that its SCAP content repository and API, SCAP Sync, will incorporate OVAL. Thurs, 16 Aug 2012 8:00 EDT http://oval.mitre.org/news/index.html#aug162012b Adam Montville of Tripwire, Inc. has joined the OVAL Board. Thurs, 16 Aug 2012 8:00 EDT http://oval.mitre.org/news/index.html#aug162012c MITRE will host an OVAL/Making Security Measurable booth at 2012 Information Assurance Expo on August 27-30, 2012 at Gaylord Opryland Resort and Convention Center in Nashville, Tennessee, USA. Thurs, 16 Aug 2012 8:00 EDT http://oval.mitre.org/news/index.html#aug162012d MITRE hosted an OVAL/Making Security Measurable booth at Black Hat Briefings 2012 on July 25-26, 2012 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Thurs, 16 Aug 2012 8:00 EDT http://oval.mitre.org/news/index.html#jul252012a Defense Information Systems Agency Field Security Operation (DISA FSO) declared that its DoD SCAP Content Repository incorporates OVAL. Wed, 25 Jul 2012 8:15 EDT http://oval.mitre.org/news/index.html#jul252012b Defense Information Systems Agency Field Security Operation (DISA FSO) is now listed on the Other Repositories page in the OVAL Repository section for its repository of OVAL content. Wed, 25 Jul 2012 8:15 EDT http://oval.mitre.org/news/index.html#jul252012c 4 briefing presentations from the OVAL-focused sessions at the Security Automation Developer Days 2012 conference on July 9-13, 2012 at MITRE in Bedford, Massachusetts, USA are now available for download on the Developer Days page on the OVAL Web site. Wed, 25 Jul 2012 8:15 EDT http://oval.mitre.org/news/index.html#jul092012a OpenVAS achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for OpenVAS. Mon, 9 Jul 2012 8:30 EDT http://oval.mitre.org/news/index.html#jul032012a G2, Inc., SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q2-2012. Tues, 3 Jul 2012 7:30 EDT http://oval.mitre.org/news/index.html#jul032012b eIQnetworks, Inc. declared that its unified situational awareness platform, SecureVue, will incorporate OVAL. Tues, 3 Jul 2012 7:30 EDT http://oval.mitre.org/news/index.html#jul032012c The OVAL Board held a teleconference meeting on July 2, 2012. Tues, 3 Jul 2012 7:30 EDT http://oval.mitre.org/news/index.html#jul032012d MITRE will host an OVAL/Making Security Measurable booth at Black Hat Briefings 2012 on July 25-26, 2012 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Tues, 3 Jul 2012 7:30 EDT http://oval.mitre.org/news/index.html#jun192012a The U.S. Defense Information Systems Agency (DISA) has added additional Security Technical Implementation Guides (STIGs) in support of Security Content Automation Protocol (SCAP) Content and Tools. Tues, 19 Jun 2012 11:00 EDT http://oval.mitre.org/news/index.html#jun192012b Registration is now closed for MITRE’s free Security Automation Developer Days 2012 conference scheduled for July 9-13, 2012 at MITRE in Bedford, Massachusetts, USA. Tues, 19 Jun 2012 11:00 EDT http://oval.mitre.org/news/index.html#jun012012a The agenda for MITRE’s free Security Automation Developer Days 2012 conference scheduled for July 9-13, 2012 at MITRE in Bedford, Massachusetts, USA is now available at https://register.mitre.org/devdays/agenda.pdf. Fri, 1 Jun 2012 8:00 EDT http://oval.mitre.org/news/index.html#jun012012b Amaresh Shirsat of Symantec Corporation has joined the OVAL Board. Fri, 1 Jun 2012 8:00 EDT http://oval.mitre.org/news/index.html#may172012a Positive Technologies CJSC achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Positive Technologies OVAL Repository. Thur, 17 May 2012 8:00 EDT http://oval.mitre.org/news/index.html#may112012a Positive Technologies CJSC declared that its Positive Technologies OVAL Repository incorporates OVAL. Fri, 11 May 2012 14:00 EDT http://oval.mitre.org/news/index.html#may112012b Positive Technologies CJSC is now listed on the Other Repositories page in the OVAL Repository section for its repository of OVAL content. Fri, 11 May 2012 14:00 EDT http://oval.mitre.org/news/index.html#may112012c MITRE Corporation will host the fourth Security Automation Developer Days conference on July 9-13, 2012, at MITRE in Bedford, Massachusetts, USA. Fri, 11 May 2012 14:00 EDT http://oval.mitre.org/news/index.html#may072012a The OVAL Interpreter and its source code have been updated to Version 5.10.1.2. Mon, 7 May 2012 13:30 EDT http://oval.mitre.org/news/index.html#apr132012a The OVAL Board held a teleconference meeting on April 9, 2012. Fri, 13 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#apr052012a The OVAL Language Sandbox is now available on GitHub.com. Wed, 4 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#apr052012b A working draft of the OVAL Language UNIX Component Data Model Specification document is now available for community review and comment on the OVAL Version 5.10.1 page in the OVAL Language section. Wed, 4 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#apr052012e Depository Trust & Clearing Corporation (DTCC), G2, Inc., SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q1-2012. Wed, 4 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#apr052012c Noah Salzman of IBM Corporation has joined the OVAL Board. Wed, 4 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#apr052012d MITRE hosted an OVAL/Making Security Measurable booth at InfoSec World Conference & Expo 2012 at Disney’s Contemporary Resort in Orlando, Florida, USA, on April 2-4, 2012. Wed, 4 Apr 2012 8:00 EDT http://oval.mitre.org/news/index.html#mar222012a MITRE will host an OVAL/Making Security Measurable booth at InfoSec World Conference & Expo 2012 at Disney’s Contemporary Resort in Orlando, Florida, USA, on April 2-4, 2012. Thurs, 22 Mar 2012 8:00 EDT http://oval.mitre.org/news/index.html#mar082012a OVAL is mentioned in a January 9, 2012 article entitled "Getting the most out of automated IT security management" on Government Computer News.com. Thurs, 8 Mar 2012 8:00 EDT http://oval.mitre.org/news/index.html#mar082012b MITRE hosted an OVAL/Making Security Measurable booth at RSA Conference 2012 at the Moscone Center in San Francisco, California, USA, on February 27 - March 2, 2012. Thurs, 8 Mar 2012 8:00 EDT http://oval.mitre.org/news/index.html#feb242012a SECURITY DATABASE achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Security-Database OVAL Repository. Fri, 24 Feb 2012 8:00 EDT http://oval.mitre.org/news/index.html#feb242012b SECURITY DATBASE is now listed on the Other Repositories page in the OVAL Repository section for its repository of OVAL content. Fri, 24 Feb 2012 8:00 EDT http://oval.mitre.org/news/index.html#feb152012c ALTX-SOFT achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Altx-Soft Ovaldb. Wed, 15 Feb 2012 8:00 EDT http://oval.mitre.org/news/index.html#feb152012a Cisco Systems, Inc. declared that its repository of OVAL content, Cisco Global Government Certifications and Best Practice Recommendations/Cisco Product Security Incident Response Team Security Advisory and Vulnerability Disclosure, will incorporate OVAL. Wed, 15 Feb 2012 8:00 EDT http://oval.mitre.org/news/index.html#feb032012a Altx-Soft declared that its Web-based OVAL Repository Database, Altx-Soft Ovaldb, incorporates OVAL. Fri, 3 Feb 2012 12:00 EDT http://oval.mitre.org/news/index.html#feb032012b Altx-Soft is now listed on the Other Repositories page in the OVAL Repository section for its repository of OVAL content. Fri, 3 Feb 2012 12:00 EDT http://oval.mitre.org/news/index.html#feb032012c MITRE is scheduled to host an OVAL/Making Security Measurable booth at RSA Conference 2012 at the Moscone Center in San Francisco, California, USA, on February 27 - March 2, 2012. Fri, 3 Feb 2012 12:00 EDT http://oval.mitre.org/news/index.html#jan272012a Version 5.10.1 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language page. Fri, 27 Jan 2012 13:00 EDT http://oval.mitre.org/news/index.html#jan272012b The OVAL Interpreter and its source code have been updated to OVAL Version 5.10.1. Fri, 27 Jan 2012 13:00 EDT http://oval.mitre.org/news/index.html#jan272012c The OVAL Repository has been updated to OVAL Version 5.10.1. Fri, 27 Jan 2012 13:00 EDT http://oval.mitre.org/news/index.html#jan272012d A working draft of the OVAL Language Windows Component Data Model Specification document is now available for community review and comment on the OVAL Version 5.10.1 page in the OVAL Language section. Fri, 27 Jan 2012 13:00 EDT http://oval.mitre.org/news/index.html#jan172012b Release Candidate 2 of Version 5.10.1 of the OVAL Language is now available on the OVAL Web site. Tues, 17 Jan 2012 12:00 EDT http://oval.mitre.org/news/index.html#jan172012a The OVAL Board held a teleconference meeting on January 9, 2012. Tues, 17 Jan 2012 12:00 EDT http://oval.mitre.org/news/index.html#jan052012a MITRE has announced its initial Making Security Measurable calendar of events for 2012. Thurs, 5 Jan 2012 8:35 EDT http://oval.mitre.org/news/index.html#jan052012b Anthony Busciglio and Omar Santos of Cisco Systems, Inc. have joined the OVAL Board. Thurs, 5 Jan 2012 8:35 EDT http://oval.mitre.org/news/index.html#jan052012c Depository Trust & Clearing Corporation (DTCC), G2, Inc., SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q4-2011. Thurs, 5 Jan 2012 8:35 EDT http://oval.mitre.org/news/index.html#dec292011a Release Candidate 1 of Version 5.10.1 of the OVAL Language is now available on the OVAL Web site. Thurs, 29 Dec 2011 7:45 EDT http://oval.mitre.org/news/index.html#dec152011a A Draft of Version 5.10.1 of the OVAL Language is now available on the OVAL Web site. Version 5.10.1 is scheduled to be moved to the Official stage on January 13, 2012. Thurs, 15 Dec 2011 7:45 EDT http://oval.mitre.org/news/index.html#dec152011b The "OVAL Language Versioning Policy" document has been updated. Thurs, 15 Dec 2011 7:45 EDT http://oval.mitre.org/news/index.html#dec012011a The OVAL Test Content downloads will now be hosted on the SourceForge.net Web site at http://sourceforge.net/projects/ovaltestcontent/. Thurs, 1 Dec 2011 8:00 EDT http://oval.mitre.org/news/index.html#nov092011a OVAL was included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) 7th Annual IT Security Automation Conference on October 31 - November 2, 2011 in Arlington, Virginia, USA. Wed, 9 Nov 2011 8:10 EDT http://oval.mitre.org/news/index.html#oct282011a The OVAL Board held a teleconference meeting on October 17, 2011. Fri, 28 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#oct142011a Tripwire, Inc. has updated its declaration stating that its security configuration management product, Tripwire Enterprise, incorporates OVAL. Fri, 14 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#oct062011a jOVAL.org achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for jovaldi. Thurs, 6 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#oct062011b OVAL will be included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) 7th Annual IT Security Automation Conference on October 31 - November 2, 2011 in Arlington, Virginia, USA. Thurs, 6 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#oct062011c G2, Inc., SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q3-2011. Thurs, 6 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#oct062011d OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin presented an OVAL/Making Security Measurable briefing and a CWE/CAPEC/MAEC briefing at Software Assurance Enabling Reliability, Resilience, Robustness, and Security Workshop on September 26, 2011 in Linthicum Heights, Maryland, USA. Thurs, 6 Oct 2011 7:30 EDT http://oval.mitre.org/news/index.html#sep142011a Version 5.10 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language page. Wed, 14 Sep 2011 8:00 EDT http://oval.mitre.org/news/index.html#sep142011b The OVAL Interpreter and its source code have been updated to OVAL Version 5.10. Wed, 14 Sep 2011 8:00 EDT http://oval.mitre.org/news/index.html#sep142011c The OVAL Repository has been updated to OVAL Version 5.10. Wed, 14 Sep 2011 8:00 EDT http://oval.mitre.org/news/index.html#sep142011d OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin will present an OVAL/Making Security Measurable briefing and a CWE/CAPEC/MAEC briefing at Software Assurance Enabling Reliability, Resilience, Robustness, and Security Workshop on September 26, 2011 in Linthicum Heights, Maryland, USA. Wed, 14 Sep 2011 8:00 EDT http://oval.mitre.org/news/index.html#aug262011a Release Candidate 2 of Version 5.10 of the OVAL Language is now available on the OVAL Web site. Version 5.10 is scheduled to be moved to the Official stage on September 14, 2011. Fri, 26 Aug 2011 11:45:00 EDT http://oval.mitre.org/news/index.html#aug152011a Version 5.10 of the OVAL Language is now scheduled to be moved to the Official stage on September 14, 2011. Mon, 15 Aug 2011 8:20:00 EDT http://oval.mitre.org/news/index.html#aug152011b CWE/CAPEC Program Manager Robert A. Martin, CWE/CAPEC Co-Founder and Architect Sean Barnum, and MAEC Program Manager Penny Chase presented an OVAL/Making Security Measurable and a CWE/CAPEC/MAEC briefing at GFIRST National Conference 2011 on August 8-12, 2011 at the Gaylord Opryland Hotel & Convention Center in Nashville, Tennessee, USA. Mon, 15 Aug 2011 8:20:00 EDT http://oval.mitre.org/news/index.html#aug042011a CWE/CAPEC Program Manager Robert A. Martin, CWE/CAPEC Co-Founder and Architect Sean Barnum, and MAEC Program Manager Penny Chase will present an OVAL/Making Security Measurable and a CWE/CAPEC/MAEC briefing at GFIRST National Conference 2011 on August 8-12, 2011 at the Gaylord Opryland Hotel & Convention Center in Nashville, Tennessee, USA. Thur, 4 Aug 2011 8:20:00 EDT http://oval.mitre.org/news/index.html#aug042011b MITRE hosted an OVAL/Making Security Measurable booth at Black Hat Briefings 2011 on August 3-4, 2011 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Thur, 4 Aug 2011 8:20:00 EDT http://oval.mitre.org/news/index.html#jul292011a SAINT Corporation achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for SAINT Vulnerability Scanner. Fri, 29 Jul 2011 6:30:00 EDT http://oval.mitre.org/news/index.html#jul292011b The OVAL Interpreter and its source code have been updated to Version 5.9.2. Fri, 29 Jul 2011 6:30:00 EDT http://oval.mitre.org/news/index.html#jul202011a Version 5.10 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on August 16, 2011. Wed, 20 Jul 2011 8:15:00 EDT http://oval.mitre.org/news/index.html#jul152011a A working draft of the OVAL Language Specification document is now available for community review and comment on the Upcoming Minor Version page in the OVAL Language section. Fri, 15 Jul 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jul152011b The OVAL Board held a teleconference meeting on July 11, 2011. Fri, 15 Jul 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jul152011c MITRE will host an OVAL/Making Security Measurable booth at Black Hat Briefings 2011 on August 3-4, 2011 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Fri, 15 Jul 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jul052011a Meeting minutes from the OVAL-focused sessions at the Security Automation Developer Days 2011 conference on June 14-17, 2011 are now available for download on the Developer Days page on the OVAL Web site. Tue, 5 Jul 2011 10:15:00 EDT http://oval.mitre.org/news/index.html#jul012011a G2, Inc., SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q2-2011. Fri, 1 Jul 2011 6:15:00 EDT http://oval.mitre.org/news/index.html#jun302011a Draft 3 of Version 5.10 of the OVAL Language is now available on the OVAL Web site. Thur, 30 Jun 2011 12:40:00 EDT http://oval.mitre.org/news/index.html#jun302011b jOVAL.org declared that its open source, Java-based OVAL Definition Interpreter, jOVAL, will incorporate OVAL. Thur, 30 Jun 2011 12:40:00 EDT http://oval.mitre.org/news/index.html#jun102011c 6 briefing presentations from the OVAL-focused sessions at the Security Automation Developer Days 2011 conference on June 14-17, 2011 at MITRE in Bedford, Massachusetts, USA are now available for download on the Developer Days page on the OVAL Web site. Wed, 22 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#jun102011c Draft 2 of Version 5.10 of the OVAL Language is now available on the OVAL Web site. Fri, 10 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#jun102011a OVAL was included in the 2011 Chief Information Officer Federal Information Security Management Act Reporting Metrics document issued on June 1, 2011 by the U.S. Department of Homeland Security and National Institute of Standards and Technology for Federal Information Security Management Act (FISMA) compliance. Fri, 10 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#jun102011b Registration is now closed for MITRE’s free Security Automation Developer Days 2011 conference scheduled for June 14-17, 2011 at MITRE in Bedford, Massachusetts, USA. Fri, 10 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#jun012011b The OVAL Technical Use Cases Guide in the OVAL Adoption section has been updated with new information. Wed, 1 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#jun012011a The agenda for MITRE’s free Security Automation Developer Days 2011 conference scheduled for June 14-17, 2011 at MITRE in Bedford, Massachusetts, USA is now available. Wed, 1 Jun 2011 7:30:00 EDT http://oval.mitre.org/news/index.html#may182011a Arellia Corporation declared that its configuration management product, Arellia Security Analysis Solution, will incorporate OVAL. Wed, 18 May 2011 11:30:00 EDT http://oval.mitre.org/news/index.html#may182011b Christopher Johnson of Hewlett-Packard Development Company, L.P. has joined the OVAL Board. Wed, 18 May 2011 11:30:00 EDT http://oval.mitre.org/news/index.html#may052011a McAfee, Inc. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for McAfee Vulnerability Manager, OVAL Adoption Questionnaire for McAfee Policy Auditor, and OVAL Adoption Questionnaire for McAfee Network Access Control. Thur, 5 May 2011 9:00:00 EDT http://oval.mitre.org/news/index.html#may052011b Symantec Corporation declared that its enterprise configuration, vulnerability, risk, and compliance management product, Symantec Risk Automation Suite, and its automated risk and policy compliance management product, Symantec Control Compliance Suite, incorporate OVAL. Thur, 5 May 2011 9:00:00 EDT http://oval.mitre.org/news/index.html#may052011c The Requesting Changes to the OVAL Language document is now available in the OVAL Language section. Thur, 5 May 2011 9:00:00 EDT http://oval.mitre.org/news/index.html#may052011d MITRE Corporation will host the third Security Automation Developer Days conference on June 14-17, 2011, at MITRE in Bedford, Massachusetts, USA. Thur, 5 May 2011 9:00:00 EDT http://oval.mitre.org/news/index.html#may052011e MITRE hosted a OVAL/Making Security Measurable booth at InfoSec World Conference & Expo 2011 at Disney’s Contemporary Resort in Orlando, Florida, USA, on April 19-21, 2011. Thur, 5 May 2011 9:00:00 EDT http://oval.mitre.org/news/index.html#apr152011a Red Hat, Inc. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Red Hat Security Advisories. Fri, 15 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr152011b Inverse Path S.r.l. achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for TPOL - OVAL Security Compliance. Fri, 15 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr152011c Greenbone Networks GmbH achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Greenbone Security Manager. Fri, 15 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr152011d The OVAL Board held a teleconference meeting on April 11, 2011. Fri, 15 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011a OVAL was included in the U.S. Department of Homeland Security (DHS) Enabling Distributed Security in Cyberspace white paper published on March 23, 2011 on the DHS Web site Blog. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011b A free OVAL Merge utility is now available on the OVAL Utilities page on SourceForge.net. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011c Hewlett-Packard, SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q1-2011. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011d Secure Bytes Corporation declared that its automated auditing product, Secure Auditor, will incorporate OVAL. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011e Meeting minutes and the 10 briefing presentations from the OVAL-focused sessions at the Spring 2011 Security Automation Developer Days conference on March 22-25, 2011 are now available for download on the Developer Days page on the OVAL Web site. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#apr082011f MITRE will host a OVAL/Making Security Measurable booth at InfoSec World Conference & Expo 2011 at Disney’s Contemporary Resort in Orlando, Florida, USA, on April 19-21, 2011. Fri, 8 Apr 2011 10:00:00 EDT http://oval.mitre.org/news/index.html#mar242011a The OVAL and TPM: Using the Trusted Platform Module to Enhance OVAL Driven Assessments white paper provides a basic introduction to the Trusted Computing Group’s Trusted Platform Module (TPM) technology and outlines the synergies between it and the assessment infrastructure supported by the OVAL Language. Thurs, 24 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar212011a The OVAL Test Content is a set of OVAL Definitions that provides a simple way to test the capability of OVAL Definition Evaluators. Mon, 21 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar212011b The OVAL Author’s Resources page gathers documents and tools for authoring content in the OVAL Language into a single location. Mon, 21 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar212011c The Challenges of Writing OVAL Definitions white paper describes the skill set required for authoring OVAL Definitions, of which knowledge of the OVAL Language itself is only a small part. Mon, 21 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011a ThreatGuard, Inc. has achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for Secutor Compliance Automation Toolkit (S-CAT), OVAL Adoption Questionnaire for Secutor Magnus, and OVAL Adoption Questionnaire for Secutor Prime. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011b Information-technology Promotion Agency, Japan (IPA) has achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for MyJVN Version Checker and an OVAL Adoption Questionnaire for MyJVN Security Configuration Checker. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011c McAfee, Inc. declared that its auditing and centralized audit validation, configuration management, and patch management tool, McAfee Policy Auditor, network connection health check, auditing and centralized audit validation, configuration management, and patch management tool, McAfee Network Access Control, and vulnerability assessment, auditing and centralized audit validation, configuration management, and patch management tool, McAfee Vulnerability Manager, incorporate OVAL. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011d Microsoft Corporation declared that its security and compliance knowledge management tool, Microsoft Security Compliance Manager, and its enterprise configuration management tool, SCAP Extension for System Center Configuration Manager 2007, incorporate OVAL. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011e MITRE hosted an OVAL/Making Security Measurable booth at the 2011 Information Assurance Symposium in Nashville, Tennessee, USA, on March 8-10, 2011. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar152011f MITRE hosted an OVAL/Making Security Measurable booth at RSA 2011 at the Moscone Center in San Francisco, California, USA, on February 14-18, 2011. Tues, 15 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar102011a A Draft of Version 5.10 of the OVAL Language is now available on the OVAL Web site. Thur, 10 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#mar102011b OVAL will be a main topic at Spring 2011 Security Automation Developer Days conference on March 22-25, 2011 held at U.S. National Institute of Standards and Technology (NIST) in Gaithersburg, Maryland, USA. Thur, 10 Mar 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011a Version 5.9 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language page. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011b The OVAL Interpreter and its source code have been updated to OVAL Version 5.9. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011c The OVAL Repository has been updated to OVAL Version 5.9. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011f The OVAL Repository now includes coverage for Apple Inc.’s Macintosh OS X operating system, in addition to coverage for IOS, PIX IOS, Windows, and UNIX. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011d MITRE will host an OVAL/Making Security Measurable booth at the 2011 Information Assurance Symposium in Nashville, Tennessee, USA, on March 8-10, 2011. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb222011e MITRE hosted an OVAL/Making Security Measurable booth at RSA 2011 at the Moscone Center in San Francisco, California, USA, on February 14-18, 2011. Tues, 22 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb142011a SecPod Technologies has achieved the second phase of the OVAL Adoption Process by submitting an OVAL Adoption Questionnaire for SecPod OVAL Definitions Professional Feed. Mon, 14 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb142011b NetIQ declared that its NetIQ Secure Configuration Manager incorporates OVAL. Mon, 14 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb022011a Version 5.9 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on February 22, 2011. Wed, 2 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb022011c Information-technology Promotion Agency, Japan (IPA) declared that its vulnerability assessment product, MyJVN Version Checker; configuration management product, MyJVN Security Configuration Checker; and its vulnerability assessment and configuration management product, MyJVN API; incorporate OVAL. Wed, 2 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#feb022011b MITRE is scheduled to host an OVAL/Making Security Measurable booth at RSA 2011 at the Moscone Center in San Francisco, California, USA, on February 14-18, 2011. Wed, 2 Feb 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan252011a Draft 3 of Version 5.9 of the OVAL Language is now available on the OVAL Web site. Tue, 25 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan212011a National Institute of Advanced Industrial Science and Technology (AIST) declared that its enterprise compliance/vulnerability management product, SIX OVAL, will incorporate OVAL. Fri, 21 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan212011b Meeting minutes for the OVAL Board teleconference meeting held on Monday, January 10, 2011 have been posted in the Community section. Fri, 21 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan212011c MITRE hosted an OVAL/Making Making Security Measurable booth at Black Hat DC 2011, on January 18-19, 2011 in Arlington, Virginia, USA. Fri, 21 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan142011a Draft 2 of Version 5.9 of the OVAL Language is now available on the OVAL Web site. Fri, 14 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan122011a The OVAL Board held a teleconference meeting on January 10, 2011. Wed, 12 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan122011b Alberto Bastos of Modulo has joined the OVAL Board. Wed, 12 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan032011a NopSec, Inc. declared that its NopSec Vulnerability Risk Management (VRM) product incorporates OVAL. Mon, 3 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan032011c G2, Inc., Hewlett-Packard, SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q4-2010. Mon, 3 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#jan032011b MITRE has announced its initial Making Security Measurable calendar of events for 2011. Mon, 3 Jan 2011 8:00:00 EDT http://oval.mitre.org/news/index.html#dec222010a SecPod Technologies declared that its definitions repository, SecPod OVAL Definitions Professional Feed, incorporates OVAL. Wed, 22 Dec 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#dec222010b Critical Watch declared that its FusionVM Enterprise Vulnerability Management System incorporates OVAL. Wed, 22 Dec 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#dec092010a eEye Digital Security has achieved the second phase of the OVAL Adoption Process by submitting a OVAL Adoption Questionnaire for Retina Network Security Scanner. Thur, 9 Dec 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#dec092010b OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin presented a briefing about OVAL/Making Security Measurable entitled "Vendor Neutral Security Measurement & Management with Standards" at ITU-T security workshop "Addressing Security Challenges on a Global Scale" on December 6-7, 2010 in Geneva, Switzerland. Thur, 9 Dec 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#dec092010c OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin presented a briefing about OVAL/Making Security Measurable and the Common Weakness Enumeration (CWE) at Rethinking Cyber Security: A Systems-Based Approach Conference on November 16-17, 2010 in Charlottesville, Virginia, USA. Thur, 9 Dec 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#nov182010a Serkan Özkan declared that its repository of OVAL Definitions from multiple sources, IT Security Database, incorporates OVAL. Thur, 18 Nov 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#nov182010b IT Security Database is now listed on the Other Repositories page in the OVAL Repository section for its repository of OVAL content. Thur, 18 Nov 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#nov042010a OVAL Team Member and CWE Program Manager Robert A. Martin will present a briefing about OVAL/Making Security Measurable and the Common Weakness Enumeration (CWE) at Rethinking Cyber Security: A Systems-Based Approach Conference on November 16-17, 2010 in Charlottesville, Virginia, USA. Thur, 4 Nov 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#nov042010b Meeting minutes for the OVAL Board teleconference meeting held on Monday, October 18, 2010 have been posted in the Community section. Thur, 4 Nov 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct212010a Tripwire, Inc. declared that its compliance assessment product, Tripwire Enterprise, incorporates OVAL. Thur, 21 Oct 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct212010b The OVAL Interpreter and its source code have been updated to Version 5.8.2. Thur, 21 Oct 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct212010c OVAL Program Manager Jonathan Baker presented a briefing about OVAL/Security Content Automation Protocol (SCAP) at 2010 Federal Cybersecurity Conference and Workshop on October 20, 2010 in Washington, D.C., USA. Thur, 21 Oct 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct212010d The OVAL Board held a teleconference meeting on October 18, 2010. Thur, 21 Oct 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct212010e Aharon Chernin of Depository Trust & Clearing Corporation (DTCC) has joined the OVAL Board. Thur, 21 Oct 2010 9:00:00 EDT http://oval.mitre.org/news/index.html#oct072010a MITRE hosted an OVAL/Making Security Measurable booth and the OVAL Team presented three briefings about OVAL entitled "SCAP 101-OVAL Tutorial," "Automated Specifications-OVAL," and "SCAP Workshop-OVAL Workshop" at the U.S. National Institute of Standards and Technology’s (NIST) 6th Annual IT Security Automation Conference on September 27-29, 2010 in Baltimore, Maryland, USA. Thur, 7 Oct 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#oct072010b Depository Trust & Clearing Corporation, SCAP.com, LLC, SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q3-2010. Thur, 7 Oct 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#oct072010c MITRE participated in a SCAP Panel Discussion about OVAL, CVE, CCE, CPE, XCCDF, and OCIL, and hosted a Making Security Measurable table booth, at Homeland Security for Networked Industries (HSNI) 2010 Conference and Expo on September 20-21, 2010 in Washington, D.C., USA. Thur, 7 Oct 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#sep242010a Catbird Networks, Inc. declared that its vulnerability scanner, IDS/IPS, and firewall product, Catbird vSecurity, incorporates OVAL. Fri, 24 Sep 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#sep242010b Modulo Security Solutions declared that its Governance, Risk Management, and Compliance (GRC) Management product, MODSIC Project, incorporates OVAL. Fri, 24 Sep 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#sep162010a The OVAL Repository surpassed the 10,000 OVAL Definitions milestone on September 16, 2010 with a new grand total of 10,003 definitions now available to the public on the OVAL Web site. Thur, 16 Sep 2010 12:30:00 EDT http://oval.mitre.org/news/index.html#sep152010a Version 5.8 of the OVAL Language has been moved to the "Official" stage and is now available on the OVAL Language page. Wed, 15 Sep 2010 17:30:00 EDT http://oval.mitre.org/news/index.html#sep152010b The OVAL Interpreter and its source code have been updated to OVAL Version 5.8. Wed, 15 Sep 2010 17:30:00 EDT http://oval.mitre.org/news/index.html#sep152010c The OVAL Repository has been updated to OVAL Version 5.8. Wed, 15 Sep 2010 17:30:00 EDT http://oval.mitre.org/news/index.html#sep102010a Release Candidate 2 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Version 5.8 is scheduled to be moved to the Official stage on September 15, 2010. Fri, 10 Sep 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#sep102010b eEye Digital Security declared that its vulnerability assessment product, Retina Network Security Scanner, incorporates OVAL. Fri, 10 Sep 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#sep102010c Triumfant, Inc. declared that its vulnerability, patch, and compliance product, Triumfant Resolution Manager, incorporates OVAL. Fri, 10 Sep 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#aug182010a Version 5.8 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on September 15, 2010. Wed, 19 Aug 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#aug182010b OVAL will be included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) 6th Annual IT Security Automation Conference on September 27-29, 2008 in Baltimore, Maryland, USA. Wed, 18 Aug 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#aug182010c Todd Dolinsky of Hewlett-Packard has joined the OVAL Board. Wed, 18 Aug 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#aug182010d Debian Project is now listed on the Other Repositories page in the OVAL Repository section for its repository of Debian OVAL Definitions. Wed, 18 Aug 2010 7:45:00 EDT http://oval.mitre.org/news/index.html#aug062010a Draft 6 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Fri, 6 Aug 2010 20:30:00 http://oval.mitre.org/news/index.html#aug022010a Version 5.8 of the OVAL Language is now scheduled to be moved to the Official stage on September 15, 2010. Mon, 2 Aug 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#aug022010b The OVAL Interpreter and its source code have been updated to Version 5.7.2. Mon, 2 Aug 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#aug022010c OVAL participated in a Making Security Measurable booth at Black Hat Briefings 2010 on July 28-29, 2010 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Mon, 2 Aug 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#jul232010a Draft 5 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Fri, 23 Jul 2010 16:00:00 EDT http://oval.mitre.org/news/index.html#jul122010a Draft 4 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Mon, 12 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010a OVAL is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2010 on July 28-29, 2010 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010b Draft 3 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010c Novell, Inc. declared that its database, SUSE Linux Enterprise OVAL Information, incorporates OVAL. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010d Novell, Inc. is now listed on the Other Repositories page in the OVAL Repository section for its SUSE Linux Enterprise OVAL Information database... Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010e Depository Trust & Clearing Corporation, SecPod Technologies, and Symantec Corporation received the "OVAL Repository Top Contributors Awards" for Q2-2010. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010f MITRE is scheduled to hold a Free Benchmark Development Course at MITRE Corporation in McLean, Virginia, USA on July 26-27, 2010. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jul062010g Minutes from the OVAL Discussion at Security Automation Developer Days Conference 2010 that was held at MITRE in Bedford, Massachusetts, USA on June 14-16, 2010 are now available on the Developer Days page on the OVAL Web site. Tue, 6 Jul 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jun242010a MITRE hosted the second Security Automation Developer Days Conference 2010 at MITRE in Bedford, Massachusetts, USA on June 14-16, 2010. Thur, 24 Jun 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may262010a MITRE is scheduled to host the second Security Automation Developer Days Conference 2010 at MITRE in Bedford, Massachusetts, USA on June 14-16, 2010. Wed, 26 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may262010b Draft 2 of Version 5.8 of the OVAL Language is now available on the OVAL Web site. Wed, 26 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may262010c Jeff Spitulnik of BigFix, Inc. has joined the OVAL Board. Wed, 26 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may122010a Version 5.7 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. Wed, 12 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may122010b The OVAL Interpreter and its source code have been updated to Version 5.7. Wed, 12 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may122010c The OVAL Repository has been updated to OVAL Version 5.7. Wed, 12 May 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#may052010a Version 5.8 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on August 18, 2010. Wed, 05 May 2010 8:20:00 EDT http://oval.mitre.org/news/index.html#may052010b The OVAL Board held a teleconference meeting on April 12, 2010. Wed, 05 May 2010 8:20:00 EDT http://oval.mitre.org/news/index.html#may052010c MITRE hosted a Making Security Measurable booth at InfoSec World Conference & Expo 2010 at the Disney Coronado Springs Resort in Orlando, Florida, USA, on April 19-21, 2010. Wed, 05 May 2010 8:20:00 EDT http://oval.mitre.org/news/index.html#apr212010a Release Candidate 4 of Version 5.7 of the OVAL Language is now available on the OVAL Web site. Wed, 21 Apr 2010 10:40:00 EDT http://oval.mitre.org/news/index.html#apr092010a Version 5.7 of the OVAL Language is now scheduled to be moved to the Official stage on May 12, 2010. Fri, 09 Apr 2010 10:40:00 EDT http://oval.mitre.org/news/index.html#apr092010b Security-Database declared that its Web-based IT vulnerability and threats dashboard, IT Dashboard, and its security scanner and compliance assessment software product, SSA - Security System Analyzer, incorporate OVAL. Fri, 09 Apr 2010 10:40:00 EDT http://oval.mitre.org/news/index.html#apr012010f Release Candidate 3 of Version 5.7 of the OVAL Language is now available on the OVAL Web site. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#apr012010a Telos Corporation declared that its certification and accreditation solutions, Xacta IA Manager Assessment Engine, Xacta IA Manager Continuous Assessment, and Xacta IA Manager HostInfo, incorporate OVAL. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#apr012010b G2, Inc. declared that its OVAL authoring tool, eSCAPe -- Enhanced SCAP Editor, incorporates OVAL. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#apr012010c Greenbone Networks GmbH declared that its vulnerability management security appliance, Greenbone Security Manager, will incorporate OVAL. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#apr012010d Depository Trust & Clearing Corporation, Hewlett-Packard, and Symantec Corporation received the OVAL Repository Top Contributors Awards for Q1-2010. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#apr012010e MITRE is scheduled to host a Making Security Measurable booth at MIS Training Institute's (MISTI) InfoSec World Conference & Expo 2010 at the Disney Coronado Springs Resort, in Orlando, Florida, USA, on April 19-21, 2010. Thu, 01 Apr 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#mar232010a Release Candidate 2 of Version 5.7 of the OVAL Language is now available on the OVAL Web site. Tues, 23 Mar 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#mar232010b Steve Grubb of Red Hat, Inc. has joined the OVAL Board. Tues, 23 Mar 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#mar182010a Luis Nunez of Cisco Systems has joined the OVAL Board. Thur, 18 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar182010b OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin presented a briefing about OVAL/Making Security Measurable to the DHS/DoD/NIST SwA Forum on March 9-12, 2010. Thur, 18 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010a Version 5.7 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on April 14, 2010. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010e Hewlett-Packard declared that its enterprise server/application lifecycle management product, HP Server Automation, application management product, HP Client Automation, and content repository, HP Live Network, incorporate OVAL. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010f Inverse Path S.r.l. declared that its vulnerability, patch, and compliance assessment tool, TPOL - OVAL Security Compliance, incorporates OVAL. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010b SAINT Corporation declared that its SAINT Vulnerability Scanner incorporates OVAL. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010c OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin is scheduled to present a briefing about OVAL/Making Security Measurable to the DHS/DoD/NIST SwA Forum on March 9-12, 2010 at MITRE Corporation in McLean, Virginia, USA. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar102010d MITRE hosted a Making Security Measurable booth at RSA 2010 at the Moscone Center in San Francisco, California, USA, on March 1-5, 2010. Wed, 10 Mar 2010 7:30:00 EDT http://oval.mitre.org/news/index.html#mar022010a ThreatGuard, Inc. declared that its enterprise SCAP compliance/vulnerability management system, Secutor Magnus, its universal, integratable SCAP assessment module, Secutor Compliance Automation Toolkit (S-CAT), and its desktop compliance/vulnerability assessment tool, Secutor Prime, incorporate OVAL. Tues, 2 Mar 2010 13:00:00 EDT http://oval.mitre.org/news/index.html#mar022010b SPAWAR Systems Center Atlantic declared that its SCAP Compliance Checker incorporates OVAL. Tues, 2 Mar 2010 13:00:00 EDT http://oval.mitre.org/news/index.html#feb252010a Red Hat, Inc. declared that its product vulnerability security advisories, Red Hat Security Advisories, incorporate OVAL. Fri, 19 Feb 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#feb252010b Modulo Security Solutions declared that its Web-based governance, risk management, and compliance (GRC) management system, Modulo Risk Manager, will incorporate OVAL. Fri, 19 Feb 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#feb252010c U.S. Army CERDEC declared that its configuration, vulnerability, patch, and software inventory network scanner, Armadillo, will incorporate OVAL. Fri, 19 Feb 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#feb252010d CA Inc. declared that its endpoint security product, CA Total Defense, will incorporate OVAL. Fri, 19 Feb 2010 8:30:00 EDT> http://oval.mitre.org/news/index.html#feb252010f Michael Tan of Microsoft Corporation has joined the OVAL Board. Fri, 19 Feb 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#feb252010e OVAL has launched a new OVAL Web site that offers streamlined functionality for users, and better illustrates the impact and use of OVAL in the community. Fri, 19 Feb 2010 8:30:00 EDT http://oval.mitre.org/news/index.html#feb172010a Draft 2 of Version 5.7 of the OVAL Language is now available on the OVAL Web site. Wed, 17 Feb 2010 11:30:00 EDT http://oval.mitre.org/news/index.html#feb032010a Version 5.7 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on April 14, 2010. Wed, 3 Feb 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#feb032010b MITRE hosted a Making Security Measurable booth at the 2010 Information Assurance Symposium in Nashville, Tennessee, USA, on February 2-5, 2010. Wed, 3 Feb 2010 8:00:00 EDT http://oval.mitre.org/news/index.html#jan292010a The Requirements and Recommendations for OVAL Adoption and Use document is now available in the OVAL Adoption Program section of the OVAL Web site. Fri, 29 Jan 2010 5:30:00 EDT http://oval.mitre.org/news/index.html#jan082010a MITRE has announced its initial Making Security Measurable calendar of events for 2010. Details regarding MITRE’s scheduled participation at these events are noted on the OVAL Calendar page. Fri, 8 Jan 2010 7:00:00 EDT http://oval.mitre.org/news/index.html#jan082010b "Security Automation: A New Approach to Managing and Protecting Critical Information" is the main topic of the Winter 2010 issue of the Department of Defense’s (DoD) Information Assurance Technology Analysis Center’s (IATAC) IAnewsletter. Fri, 8 Jan 2010 7:00:00 EDT http://oval.mitre.org/news/index.html#jan082010c The OVAL Interpreter has been updated to Version 5.6, Build 4. Specific updates to the OVAL Interpreter included correcting some minor bugs. Fri, 8 Jan 2010 7:00:00 EDT http://oval.mitre.org/news/index.html#jan082010d Depository Trust & Clearing Corporation, Gideon Technologies, Inc., Hewlett-Packard, National Institute of Standards and Technology, and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q4-2009. Fri, 8 Jan 2010 7:00:00 EDT http://oval.mitre.org/news/index.html#jan082010e Eric Walker of BigFix, Inc. has joined the OVAL Board. Fri, 8 Jan 2010 7:00:00 EDT http://oval.mitre.org/news/index.html#20091105a MITRE presented a Making Security Measurable briefing and hosted a Making Security Measurable booth at the U.S. National Institute of Standards and Technology's (NIST) 5th Annual IT Security Automation Conference on October 26-29, 2009. Thur, 5 Nov 2009 7:00:00 EDT http://oval.mitre.org/news/index.html#20091105b The OVAL Board held a teleconference meeting on October 19, 2009. Thur, 5 Nov 2009 7:00:00 EDT http://oval.mitre.org/news/index.html#20091002a Hewlett-Packard, Gideon Technologies, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q3-2009. Fri, 2 Oct 2009 7:00:00 EDT http://oval.mitre.org/news/index.html#20091001a MITRE is scheduled to host a Making Security Measurable booth and present a Making Security Measurable briefing at the U.S. National Institute of Standards and Technology’s (NIST) 5th Annual IT Security Automation Conference on October 26-29, 2009 in Baltimore, Maryland, USA. Thur, 1 Oct 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20091001b The OVAL Repository surpassed the 6,000 OVAL Definitions milestone on September 29, 2009 with a new grand total of 6,002 definitions now available to the public on the OVAL Web site. Thur, 1 Oct 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20091001c The OVAL Interpreter has been updated to Version 5.6, Build 3. Thur, 1 Oct 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20091001d An article entitled "Making Security Measurable and Manageable" by OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin was published in the September/October 2009 issue of CrossTalk, The Journal of Defense Engineering. Thur, 1 Oct 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090911a Version 5.6 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. Fri, 11 Sep 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090911b The OVAL Interpreter and its source code have been updated to Version 5.6. Fri, 11 Sep 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090911c The OVAL Repository has been updated to OVAL Version 5.6. Fri, 11 Sep 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090911d OVAL will be included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) 5th Annual IT Security Automation Conference on October 26-29, 2008 in Baltimore, Maryland, USA. Fri, 11 Sep 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090911e OVAL Team Member and CWE/CAPEC Program Manager Robert A. Martin presented a briefing about Making Security Measurable at GFIRST5: The 5 Pillars of Cyber Security on August 24-28, 2009 at Atlanta, Georgia, USA. Fri, 11 Sep 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090828a Release Candidate 2 of Version 5.6 of the OVAL Language is now available on the OVAL Web site. Fri, 28 Aug 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090813a The OVAL Interpreter has been updated to Version 5.5, Build 25. Specific updates to the OVAL Interpreter included: adding support for one new test, and correcting some minor bugs. Thur, 13 Aug 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090731a Version 5.6 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on August 28, 2009. Fri, 31 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090731b The OVAL Interpreter has been updated to Version 5.5, Build 23. Fri, 31 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090731c OVAL participated in a Making Security Measurable booth at Black Hat Briefings 2009 on July 29-30, 2009 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Fri, 31 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090717a Hewlett-Packard, Gideon Technologies, Inc., and SecPod Technologies received the "OVAL Repository Top Contributors Awards" for Q2-2009. Fri, 17 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090717b The OVAL Board held a teleconference meeting on July 14, 2009. Fri, 17 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090717c MITRE hosted the first-ever Security Content Developer Days 2009 on June 8-12, 2009, at MITRE in Bedford, Massachusetts, USA. Fri, 17 Jul 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090702a Draft 2 of Version 5.6 of the OVAL Language is now available on the OVAL Web site. Thur, 2 Jul 2009 9:00:00 EDT http://oval.mitre.org/news/index.html#20090702b A free "OVAL Checker" utility was posted for the public on June 15, 2009 on the free OVAL Utilities SourceForge.net site. Thur, 2 Jul 2009 9:00:00 EDT http://oval.mitre.org/news/index.html#20090702c OVAL is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2009 on July 29-30, 2009 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Thur, 2 Jul 2009 9:00:00 EDT http://oval.mitre.org/news/index.html#20090702d MITRE is scheduled to hold a Free Benchmark Development Course at MITRE Corporation in McLean, Virginia, USA on July 14-15, 2009. Thur, 2 Jul 2009 9:00:00 EDT http://oval.mitre.org/news/index.html#20090702e MITRE hosted the first-ever Security Automation Developer Days 2009 on June 8-12, 2009, at MITRE in Bedford, Massachusetts, USA. Thur, 2 Jul 2009 9:00:00 EDT http://oval.mitre.org/news/index.html#20090604a A free "OVAL Splitter" utility was posted for the public on June 1, 2009 on the OVAL Utilities SourceForge.net site. Thur, 4 Jun 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090604b OVAL was mentioned in an article entitled "How SCAP Brought Sanity to Vulnerability Management" in Computerworld on May 11, 2009. Thur, 4 Jun 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090604c OVAL was mentioned in an article entitled "Draft guidelines issued for using SCAP to automate security validation" in Government Computer News on May 7, 2009. Thur, 4 Jun 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090514a Version 5.6 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on August 14, 2009. Thur, 14 May 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090507a MITRE is scheduled to host the first-ever Security Automation Developer Days 2009 on June 8-12, 2009, at MITRE in Bedford, Massachusetts, USA. Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090507b Hewlett-Packard and Gideon Technologies, Inc. received the "OVAL Repository Top Contributors Awards" for Q1-2009. Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090507c Jim Hansen of BigFix, Inc. has joined the OVAL Board. Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090507d Meeting minutes for the OVAL Board teleconference held on Monday, April 13, 2009 have been posted on the Discussion Archives page. Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090507e MITRE hosted a Making Security Measurable booth at RSA 2009 at the Moscone Center in San Francisco, California, USA, on April 20-24, 2009. Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090507f MITRE Corporation was recognized as "Outstanding Organization of the Year" for 2008 by the Information Systems Security Association (ISSA). Thur, 7 May 2009 13:00:00 EDT http://oval.mitre.org/news/index.html#20090416a The OVAL Team has created a new OVAL Utilities project on the Sourceforge.net Web site to host a suite of open source utilities that simplify working with OVAL content. Thur, 16 Apr 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090416a The OVAL Board held a teleconference meeting on April 13, 2009. Thur, 16 Apr 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090401a MITRE is scheduled to host a Making Security Measurable booth at RSA 2009 at the Moscone Center in San Francisco, California, USA, on April 20-24, 2009. Please stop by Booth 2411 and say hello! Thur, 2 Apr 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090401b A new page entitled OVAL Language Deprecation Policy has been posted in the OVAL Language section of the OVAL Web site. Thur, 2 Apr 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090319a The OVAL Terms of Use page has been updated with a new "Introduction" section to help clarify that MITRE has copyrighted the OVAL Language for the benefit of the community in order to ensure it remains a free and open standard... Thur, 19 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090319b MITRE is scheduled to hold a Free Benchmark Development Course at MITRE Corporation in McLean, Virginia, USA on April 8, 2009. Thur, 19 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090319c MITRE hosted a Making Security Measurable booth at MIS Training Institute’s (MISTI) InfoSec World Conference & Expo 2009 at the Disney Coronado Springs Resort, in Orlando, Florida, USA, on March 9-10, 2009. Thur, 19 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090319d OVAL Team Member and CWE Program Manager Robert A. Martin presented a briefing about OVAL/Making Security Measurable to the DHS/DoD/NIST SwA Forum on March 10-12, 2009 at MITRE Corporation in McLean, Virginia, USA. Thur, 19 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090305a OVAL Team Member and CWE Program Manager Robert A. Martin is scheduled to present a briefing about OVAL/Making Security Measurable to the DHS/DoD/NIST SwA Forum on March 10-12, 2009 at MITRE Corporation in McLean, Virginia, USA. Thur, 5 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090305a Chandrashekhar B of SecPod Technologies has joined the OVAL Board. Thur, 5 Mar 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090219a MITRE is scheduled to host a Making Security Measurable booth at MIS Training Institute’s (MISTI) InfoSec World Conference & Expo 2009 at the Disney Coronado Springs Resort, in Orlando, Florida, USA, on March 9-10, 2009. Thur, 19 Feb 2009 8:00:00 EDT http://oval.mitre.org/news/index.html#20090205a MITRE hosted a Making Security Measurable booth at the 2009 Information Assurance Symposium at the Sheraton Dallas International Conference and Exposition Center, in Dallas, Texas, USA, on February 3-5, 2009. Thur, 5 Feb 2009 7:50:00 EDT http://oval.mitre.org/news/index.html#20090205a Blake Frantz and Steven Piliero of the Center for Internet Security have joined the OVAL Board. Thur, 5 Feb 2009 7:50:00 EDT http://oval.mitre.org/news/index.html#20090122a MITRE is scheduled to host a Making Security Measurable booth at the 2009 Information Assurance Symposium at the Sheraton Dallas International Conference and Exposition Center, in Dallas, Texas, USA, on February 3-6, 2009. Thur, 22 Jan 2009 11:00:00 EDT http://oval.mitre.org/news/index.html#20090122b Scott Armstrong and Jonathan Frazier of Gideon Technologies, Inc., Stephen Quinn of the National Institute of Standards and Technology (NIST), and Anton Chuvakin of Qualys, Inc. have joined the OVAL Board. Thur, 22 Jan 2009 11:00:00 EDT http://oval.mitre.org/news/index.html#20090122c The OVAL Board held a teleconference meeting on January 12, 2009. Thur, 22 Jan 2009 11:00:00 EDT http://oval.mitre.org/news/index.html#20090108a MITRE has announced its initial Making Security Measurable calendar of events for 2009. Thur, 8 Jan 2009 8:30:00 EDT http://oval.mitre.org/news/index.html#20090108b Hewlett-Packard and Secure Elements a division of Fortinet, Inc. received the "OVAL Repository Top Contributors Awards" for Q4-2008. Thur, 8 Jan 2009 8:30:00 EDT http://oval.mitre.org/news/index.html#20081222a The rollout timeline on the OVAL Adoption Program page for OVAL and NIST's new OVAL Adoption/Validation Programs has been updated. Mon, 22 Dec 2008 8:30:00 EDT http://oval.mitre.org/news/index.html#20081204a MITRE Principal Engineer Robert A. Martin presented a white paper entitled "Making Security Measurable and Manageable" at MILCOM 2008 on November 19, 2008 in San Diego, California, USA. Thur, 4 Dec 2008 10:50:00 EDT http://oval.mitre.org/news/index.html#20081204b OVAL was mentioned in a December 1, 2008 MITRE news release entitled "MITRE Releases New Security Software" about its new, open source "Recommendation Tracker" software that "facilitates development of automated security benchmarks." Thur, 4 Dec 2008 10:50:00 EDT http://oval.mitre.org/news/index.html#20081107a A rollout timeline has been posted on the OVAL Adoption Program page for OVAL and NIST's new OVAL Adoption/Validation Programs. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081107a OVAL Team Member Robert A. Martin is scheduled to present a white paper entitled "Making Security Measurable and Manageable" at MILCOM 2008 on November 19, 2008 in San Diego, California, USA. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081107a Meeting minutes for the OVAL Board teleconference held on Monday, October 20, 2008 have been posted on the Discussion Archives page. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081016a The OVAL Interpreter has been updated to Version 5.5.4. Thu, 16 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001a Version 5.5 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001b The OVAL Interpreter has been updated to Version 5.5. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001d Secure Elements, Inc. and Hewlett-Packard received the "OVAL Repository Top Contributors Awards" for Q3-2008. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001c The OVAL Team contributed to OVAL-related workshops and MITRE hosted a Making Security Measurable table booth at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2008 on September 23-25, 2008 in Gaithersburg, Maryland, USA. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20080910a Version 5.5 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on October 1, 2008. Wed, 10 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080904a OVAL has partnered with the U.S. National Institute of Standards and Technology (NIST) to replace the OVAL Compatibility program with two independent but complementary efforts, an "OVAL Adoption Program" managed by MITRE and the "Security Content Automation Protocol (SCAP) Validation Program" managed by NIST. Tue, 2 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080904b Draft 2 of Version 5.5 of the OVAL Language is now available. Version 5.5, currently in the Draft stage, is scheduled to be moved to the Release Candidate stage on September 10, 2008 and the Official stage on October 1, 2008. Tue, 2 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814a Version 5.5 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on September 18, 2008. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814b The OVAL Repository now includes coverage for the Cisco IOS operating system, in addition to coverage for UNIX and Windows. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814c OVAL will be included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) Security Automation Conference & Workshop 2008 on September 23-25, 2008 in Gaithersburg, Maryland, USA. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814d OVAL participated in a Making Security Measurable booth at Black Hat Briefings 2008 on August 6-7, 2008 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080724a GFI Software Ltd., Hewlett-Packard, and Secure Elements, Inc. received the "OVAL Repository Top Contributors Awards" for Q2-2008. Wed, 23 Jul 2008 8:15:00 EDT http://oval.mitre.org/news/index.html#20080724b Maitreya Security Ltd. Co. declared that the Dharma Repository will be OVAL-Compatible. Wed, 23 Jul 2008 8:15:00 EDT http://oval.mitre.org/news/index.html#20080710a OVAL is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2008 on August 6-7, 2008 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Mon, 7 Jul 2008 8:25:00 EDT http://oval.mitre.org/news/index.html#20080626a MITRE hosted a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA. Mon, 7 Jul 2008 8:25:00 EDT http://oval.mitre.org/news/index.html#20080605a Version 5.3 of the OVAL Interpreter was included in Debian’s April 21, 2008 release of Ubuntu 8.04. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605b Meeting minutes from this year’s OVAL Developer Days conference held on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA are now available. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605d CVE Compatibility Lead/CWE Program Manager Robert A. Martin and CVE Technical Lead/CWE Technical Lead Steven M. Christey presented a Making Security Measurable briefing and hosted a half-day Making Security Measurable tutorial at AusCERT 2008 on May 18-23, 2008 at Royal Pines Resort in Gold Coast, Australia. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605c CVE Compatibility Lead/CWE Program Manager Robert A. Martin presented a briefing about Making Security Measurable at the 4th Annual GFIRST Conference on June 2-4, 2008 at the Caribe Royale Hotel in Orlando, Florida, USA. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080515a OVAL was the main topic of an April 30, 2008 news release by Secure Elements Receives OVAL Repository Top Contributor Award for Advancing Open Information Security Content Standard. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515a OVAL was the main topic of an April 30, 2008 news release by Secure Elements Receives OVAL Repository Top Contributor Award for Advancing Open Information Security Content Standard. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515b Briefing slides from this year’s OVAL Developer Days conference held on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA are now available on the OVAL Developer Days page. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515c CVE Compatibility Lead/CWE Project Manager Robert A. Martin and CVE Technical Lead/CWE CVE Technical Lead Steven M. Christey are scheduled to present a Making Security Measurable briefing and host a full-day Making Security Measurable tutorial at AusCERT 2008 on May 18-23, 2008 at Royal Pines Resort in Gold Coast, Australia. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515d CVE Compatibility Lead/CWE Project Manager Robert A. Martin is scheduled to present a briefing about Making Security Measurable at the 4th Annual GFIRST Conference on June 2-4, 2008 at the Caribe Royale Hotel in Orlando, Florida, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515e MITRE is scheduled to host a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515f CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a 2008 IEEE Conference on Technologies for Homeland on May 12-13, 2008 at the Westin Hotel in Waltham, Massachusetts, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501a The OVAL Team hosted this year’s OVAL Developer Days conference on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501b TMC y Cia declared that its vulnerability analysis service, FAV - Falcon Analisis de Vulnerabilidades, is OVAL-Compatible. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501c CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a Making Security Measurable briefing entitled "Architecting Security Measurement and Management for Compliance" at CSI Security Exchange 2008 on April 27, 2008 at Mandalay Bay Convention Center in Las Vegas, Nevada, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501d CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a Making Security Measurable briefing entitled "Architecting Your IT Security Standards to Secure your Enterprise" at GOVSEC on April 24, 2008 at Walter E. Washington Convention Center in Washington, D.C., USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501e MITRE hosted a Making Security Measurable exhibitor booth at RSA 2008 on April 7-11, 2008 at the Moscone Center in San Francisco, California, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080410a Version 5.4 OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files on the SourceForge.net Web site at http://sourceforge.net/projects/ovaldi/ have also been updated. Thu, 10 Apr 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080410b The OVAL Interpreter has been updated to Version 5.4. Specific updates to the OVAL Interpreter included: addition of support for Version 5.4 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Thu, 10 Apr 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080307a Version 5.4 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on March 28, 2008. Fri, 7 Mar 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080307b OVAL was mentioned in a March 3, 2008 article entitled "SCAP narrows security gap" in Government Computer News. Fri, 7 Mar 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222a MITRE is scheduled to host our OVAL Developer Days conference on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222b Lieberman Software Corporation declared that its system security reporting, management, and remediation product, User Manager Pro, will be OVAL-Compatible. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222c MITRE is scheduled to host a Making Security Measurable exhibitor booth at InfoSec World Conference & Expo 2008 on March 10-11, 2008 at the Rosen Shingle Creek Resort in Orlando, Florida, USA. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080214a The OVAL Interpreter has been updated to address several bugs found by Lumension Security, Inc. and others. Thu, 14 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201a The OVAL Interpreter and data files will now be hosted on the SourceForge.net Web site at http://sourceforge.net/projects/ovaldi/. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201b OVAL was mentioned in a January 13, 2008 article entitled "PC Lockdown in the Government and Beyond" in eWeek Magazine. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201c MITRE hosted a Making Security Measurable exhibitor booth at the 2008 Information Assurance Workshop on January 28 - February 1, 2008 at the Philadelphia Marriott Downtown in Philadelphia, Pennsylvania, USA. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201d Meeting minutes for the OVAL Board teleconference held on Monday, January 14, 2008 have been posted on the Discussion Archives page. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117a Hewlett-Packard and Maitreya Security Ltd. Co. received the "OVAL Repository Top Contributors Awards" for Q4-2007. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117b The OVAL Interpreter has been updated to incorporate several bug fixes and community code contributions. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117c The OVAL Board held a teleconference on Monday, January 14, 2007 with 20 members participating. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080103a MITRE has announced its initial Making Security Measurable calendar of events for the first half of 2008. Thu, 3 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20071220a OVAL began five years ago this month as a new community baseline standard for how vulnerabilities could be identified on local computers. Thu, 20 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071220b The OVAL Repository surpassed the 5,000 OVAL Definitions milestone on December 14, 2007 with a new grand total of 5,061 definitions now available to the public on the OVAL Web site. Of these, there are 1,576 definitions for Microsoft Windows and 3,485 definitions for UNIX. Thu, 20 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071206a Red Hat, Inc. has incorporated the OVAL Interpreter into the latest releases of Fedora 7 and Fedora 8. Thu, 06 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071206b MITRE is scheduled to host a Making Security Measurable exhibitor booth at the 2008 Information Assurance Workshop on January 28 - February 1, 2008 at the Philadelphia Marriott Downtown in Philadelphia, Pennsylvania, USA. Thu, 06 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108a Ai Metrix, a SYS Technologies Company, declared that its network management system for Security Content Automation Protocol (SCAP) services and reporting, NeuralStar Network, will be OVAL-Compatible. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108b OVAL was mentioned in the "Product Releases" article in Processor Magazine on October 5, 2007. OVAL is mentioned in the "Security" section of the article regarding Secure Elements' C5 Compliance Platform 3.3. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108c OVAL was mentioned in a September 18, 2007 news release from Secure Elements, Inc. entitled "Secure Elements Announces New Version of IT Audit and Compliance Platform." OVAL is mentioned in the portion of the release that describes how Secure Elements' C5 Compliance Platform Version 3.3 adds enhanced NIST SCAP FISMA reporting. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108d The OVAL Repository was the main topic of an October 23, 2007 news release from Secure Elements, Inc. entitled "Secure Elements Receives OVAL Repository Top Contributor Award For Advancing Open Information Security Content Standards for the 3rd Quarter of 2007." Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071018a Maitreya Security Ltd. Co., Opsware, Inc., Secure-Elements, Inc., and ThreatGuard, Inc. received the "OVAL Repository Top Contributors Awards" for Q3-2007. Thu, 18 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071018b OVAL was mentioned in an article entitled "Service-oriented security" in NetworkWorld on September 25, 2007. Thu, 18 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004a eEye Digital Security, Inc. has declared that its network security risk assessment and vulnerability management products, Retina Network Security Scanner and Retina Enterprise Suite, will be OVAL-Compatible. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004b OVAL was the main topic of an August 20, 2007 article written by OVAL Board member Amol Sarwate of Qualys, Inc. entitled "Hot or not: Open Vulnerability Assessment Language" in SC Magazine. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004c OVAL was included as a topic at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 19-20, 2007 in Gaithersburg, Maryland, USA. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906a eEye Digital Security, Inc. has declared that its network security risk assessment and vulnerability management products, Retina Network Security Scanner and Retina Enterprise Suite, will be OVAL-Compatible. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906b MITRE will host a Making Security Measurable exhibitor booth at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 19-20, 2007 in Gaithersburg, Maryland, USA. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906c MITRE hosted a Making Security Measurable exhibitor booth at Black Hat Briefings 2007 on August 1-2, 2007 at Caesars Palace in Las Vegas, Nevada, USA. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070823a McAfee, Inc. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for its Hercules Policy Auditor 4.5 and Hercules Remediation Manager 4.5 products, which are both now registered as "Officially OVAL-Compatible." Thu, 23 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070823b Guidance Software, Inc. has declared that its EnCase Information Assurance Suite will be OVAL-Compatible. Thu, 23 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070802a OVAL will be included as a topic at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 18-19, 2007 in Gaithersburg, Maryland, USA. Thu, 2 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070802b The OVAL Board held a teleconference on Monday, July 16, 2007 with 25 members participating. Thu, 2 Aug 2007 http://oval.mitre.org/news/index.html#20070712 ThreatGuard, Inc., Secure-Elements, Inc., and Opsware, Inc. received the "OVAL Repository Top Contributors Awards" for Q2-2007. Thu, 12 Jul 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627a Version 5.3 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files have also been updated. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627b The OVAL Interpreter has been updated to Version 5.3. Specific updates to the OVAL Interpreter included: addition of support for Version 5.3 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627c The OVAL Repository now contains more than 2,000 OVAL Definitions. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627d Updated Guidelines for Submitting OVAL Definitions have been posted in the OVAL Repository section of the OVAL Web site. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627e OVAL was mentioned in a May 22, 2007 article entitled "NIST releases FISMA security control tools" in Government Computer News. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601a A second Release Candidate of Version 5.3 of the OVAL Language is now available. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601b Opsware, Inc. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for its Opsware Server Automation System. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601c Roger Castillo of AlterPoint has joined the OVAL Board. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070517a Version 5.3 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on June 6, 2007. Thu, 17 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503a Opsware Inc. has achieved the second phase of the OVAL Compatibility Program by posting an OVAL Compatibility Questionnaire for Opsware Server Automation System and OVAL Compatibility Questionnaire for Opsware Network. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503b US Army CERDEC has declared that its vulnerability assessment and remediation tool, Armadillo, will be OVAL Compatible. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503c OVAL was included as a product feature in a March 19, 2007 product review article entitled "Rollout: Kace KBox 1000/2000 Series Appliances" in Network Computing. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503d ThreatGuard, Inc. and Centennial Software Ltd. received the "OVAL Repository Top Contributors Awards" for Q1-2007. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419a GFI Software Ltd. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for GFI LANguard Network Security Scanner, its network vulnerability assessment and remediation product. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419b Security-Database.com has completed correctness testing for Phase 3 of the OVAL Compatibility Program for System Security Analyzer, its vulnerability assessment and policy compliance product. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419c Opsware Inc. has declared that its Opsware Server Automation System, and its Opsware Network content repository, will be OVAL Compatible. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419d MITRE held an OVAL Compatibility Correctness Testing session on April 11, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.2 of OVAL. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070405a Version 5.3 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on May 7, 2007. Thu, 05 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070405b MITRE will hold an OVAL Compatibility Correctness Testing session on April 11, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.2 of OVAL. Thu, 05 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301a GFI Software Ltd. has declared that its network vulnerability assessment and remediation product, GFI LANguard Network Security Scanner, will be OVAL Compatible. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301b McAfee, Inc. has achieved the second phase of the OVAL Compatibility Program by posting an OVAL Compatibility Questionnaire for Hercules Policy Auditor 4.2 and OVAL Compatibility Questionnaire for Hercules Remediation Manager 4.2. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301e OVAL was included in a February 6, 2006 news release from Secure-Elements, Inc. entitled "Secure Elements announces first ever training program for authoring standards based XML documents for system audit and compliance measurement". Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301f OVAL was cited in the description of SC Magazine’s "Editor’s Choice Professional Award" to the NSA’s Information Assurance Directorate’s Vulnerability Analysis and Operations (VAO) Group for its work in the past year with the U.S. Air Force and Microsoft Corporation. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301g OVAL co-hosted a Making Security Measurable exhibitor booth for MITRE’s OVAL, CVE, CCE, CME, CWE, and CPE efforts at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-15, 2007 at the Wyndham Orlando Resort, in Orlando, Florida, USA. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215a Configuresoft, Inc. has posted an OVAL Compatibility Questionnaire for Configuresoft Enterprise Configuration Manager for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215b NetIQ Corporation has posted an OVAL Compatibility Questionnaire for NetIQ Secure Configuration Manager for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215c The U.S. National Institute of Standards and Technology (NIST) has posted an OVAL Compatibility Questionnaire for Security Content Automation Program Content for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215d ThreatGuard, Inc. has posted an OVAL Compatibility Questionnaire for Secutor Prime for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215e MITRE hosted an OVAL/CVE/CCE/CME/CWE/CPE exhibitor booth at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-15, 2007 at the Wyndham Orlando Resort, in Orlando, Florida, USA. Thu, 15 Feb 2007 15:00:00 EDT http://ovaldev1.mitre.org/news/index.html#20070215f MITRE hosted an OVAL/CVE/CCE/CME/CWE/CPE exhibitor booth at RSA Conference 2007 on February 5-8, 2007 at the Moscone Center in San Francisco, California, USA. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215g With the help of government and commercial vendors, MITRE held an OVAL Demonstration across the exposition floor of RSA Conference 2007 on February 5-8, 2007 in San Francisco, California, USA. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070202a MITRE has launched an "OVAL Repository Top Contributors Award Program" that grants awards on a quarterly basis to the top contributors to the OVAL Repository. Fri, 02 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070131a Version 5.2 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files have also been updated. Wed, 31 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070131b The OVAL Interpreter has been updated to Version 5.2. Specific updates to the OVAL Interpreter included: addition of support for Version 5.2 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Wed, 31 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125a Version 5.2 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on January 31, 2007. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125b MITRE held an OVAL Compatibility Correctness Testing session on January 17, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.1 of OVAL. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125c With the help of both government and commercial vendors, MITRE has organized an OVAL Demonstration to be held across the exposition floor of RSA Conference 2007 on February 5-8, 2007 at the Moscone Center in San Francisco, California, USA. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125d Security-Database.com declared that its vulnerability assessment and policy compliance product, System Security Analyzer, will be compatible with Version 5.1 of OVAL. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125e The OVAL Board held a teleconference on Tuesday, January 16, 2007, with representatives from 7 member organizations and others participating. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125f The OVAL Repository Updates RSS feed can now be customized to a user's preferences. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104a MITRE will hold an OVAL Compatibility Correctness Testing session on January 17, 2007 at MITRE in Bedford, Massachusetts Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104b MITRE is scheduled to host an OVAL/CVE/CCE/CWE/CME exhibitor booth at RSA Conference 2007 on February 5-8, 2007 Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104c MITRE is scheduled to host an OVAL/CVE/CCE/CWE/CME exhibitor booth at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-16, 2007 Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104d Due to business disaster planning activities the OVAL Web site may be temporarily unavailable for short periods Thu, 4 Jan 2007 15:00:00 EDT