Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Nov 2008 08:21:05 -0800
From:      Mark Foster <mark@foster.cc>
To:        freebsd-security@freebsd.org
Subject:   portaudit, vuxml & OVAL data
Message-ID:  <491DA571.2060105@foster.cc>

next in thread | raw e-mail | index | archive | help
I have a project idea regarding the extension of portaudit (which now
solely relies on the vuxml data from security/vuxml) to additionally
parse OVAL (CVE) data from the SCAP project.
http://nvd.nist.gov/scap.cfm
http://oval.mitre.org/

I see that they already have a schema definition for FreeBSD found here:
http://oval.mitre.org/language/download/schema/version5.5/index.html

I could see this turning into a oval2portaudit tool accompanied by a
modification of portaudit (if necessary) to accomodate
additional/disparate data sources.

-- 
Realization #2031: That the "meaning of life" is now just another Google 
search.
Mark D. Foster <mark@foster.cc>
http://mark.foster.cc/ | http://conshell.net/






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?491DA571.2060105>