OpenSCAP Version 0.5.3 released

The OpenSCAP Project was created to provide an open-source framework to the community which enables integration with the Security Content Automation Protocol (SCAP) suite of standards and capabilities. It is the goal of OpenSCAP to provide a simple, easy to use set of interfaces to serve as the framework for community use of SCAP

SCAP is a line of standards managed by NIST with the goal of providing a standard language for the expression of Computer Network Defense related information. More information about SCAP can be found at nvd.nist.gov/scap.cfm.

The SCAP suite contains multiple complex data exchange formats that are to be used to transmit important vulnerability, configuration, and other security data. Historically, there have been few tools that provide a way to query this data in the needed format. This lack of tools makes the barrier to entry very high and discourages adoption of these protocols by the community.

Security-Database supports the use of open standards and SCAP.

PNG - 22.8 kb

Changelog

  • OVAL results part is code complete
  • improved memory management of definition and system characteristic model (OVAL)
  • improved memory management of S-expressions
  • new probe API
  • refactoring