OVAL - Open Vulnerability and Assessment Language

News
OVAL Version 5.5 in Release Candidate Stage OVAL and NIST Partner to Create New OVAL Adoption/Validation Programs Coverage of Cisco IOS Added to OVAL Repository OVAL Included as Topic at Security Automation Conference 2008, September 23-25

OVAL is an international, information security, community standard to promote open and publicly available security content, and to standardize the transfer of this information across the entire spectrum of security tools and services.

OVAL Language		OVAL Repository
A collection of XML schema for representing system information, expressing specific machine states, and reporting the results of an assessment		The central meeting place for the OVAL Community to discuss, analyze, store, and disseminate OVAL Definitions
Go to the Language		Go to the Repository

Similar Standards
Vulnerabilities (CVE) Configurations (CCE) Platforms (CPE) Software Weakness Types (CWE) Log Format (CEE) Reporting (CRF)	Attack Patterns (CAPEC) Checklist Language (XCCDF) Security Content Automation (SCAP) Making Security Measurable

Page Last Updated: September 10, 2008

OVAL Community Forums

Active participation is an important part of OVAL. Members of the information security community are invited to participate in the OVAL effort by joining our three lightly moderated email discussion lists:

OVAL Repository Forum – for discussing OVAL Repository content

OVAL Developer’s Forum – for discussing the OVAL Language and its implementation

OVAL Remediation Forum – for discussing and developing a standardized remediation language that leverages community knowledge and experience gained through development of the OVAL Language

More >>


	OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. The OVAL Web site is hosted by The MITRE Corporation. Copyright 2002-2008, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation. Contact oval@mitre.org for more information.	Privacy policy Terms of use