Interactive Schema

The interactive schema defines a conceptual framework for representing questions designed as an XCCDF checking system.

An XCCDF document contains a series of checks; each check represents a question that is responsible for determining information relating to the state of a target system. In an XCCDF document, the majority of checks are automated to allow SCAP scanners to consume the checks and resolve the answers with no human interaction. However, there are some checks where automation is not possible due to the need for human input. For example, a computer cannot answer a check designed to verify that a department’s security logs are up to date. A human responsible for the department’s security logs must answer this question.

The interactive schema provides the conceptual framework for representing non-automatable questions. The following list defines the features supported by the schema:

• Ability to define questions (of type Boolean, Choice, Numeric, or String)
• Ability to define possible answers to a question from which the user can choose
• Ability to define actions to be taken resulting from a user’s answer
• Ability to enumerate the result set

XML Schema Files:  [what is a schema?]

Interactive Schema (XSD 1.0)

Sample Files:

General-Mitre-Interactive-1.xml

scap-win2000-interactive.xml

Documentation:

Element Dictionary.pdf

Changes.txt

Interactive Schema Interpreter

The Interactive Schema Interpreter demonstrates how an interactive schema document can be evaluated.

Download:

Download Page

Project Page