http://oval.mitre.org/news/index.html OVAL news headlines for the latest compatible products, data and schema updates, upcoming conferences, new Web site features, OVAL in the news, etc. en-us oval@mitre.org Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20081222a The rollout timeline on the OVAL Adoption Program page for OVAL and NIST's new OVAL Adoption/Validation Programs has been updated. Mon, 22 Dec 2008 8:30:00 EDT http://oval.mitre.org/news/index.html#20081204a MITRE Principal Engineer Robert A. Martin presented a white paper entitled "Making Security Measurable and Manageable" at MILCOM 2008 on November 19, 2008 in San Diego, California, USA. Thur, 4 Dec 2008 10:50:00 EDT http://oval.mitre.org/news/index.html#20081204b OVAL was mentioned in a December 1, 2008 MITRE news release entitled "MITRE Releases New Security Software" about its new, open source "Recommendation Tracker" software that "facilitates development of automated security benchmarks." Thur, 4 Dec 2008 10:50:00 EDT http://oval.mitre.org/news/index.html#20081107a A rollout timeline has been posted on the OVAL Adoption Program page for OVAL and NIST's new OVAL Adoption/Validation Programs. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081107a OVAL Team Member Robert A. Martin is scheduled to present a white paper entitled "Making Security Measurable and Manageable" at MILCOM 2008 on November 19, 2008 in San Diego, California, USA. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081107a Meeting minutes for the OVAL Board teleconference held on Monday, October 20, 2008 have been posted on the Discussion Archives page. Fri, 7 Nov 2008 7:20:00 EDT http://oval.mitre.org/news/index.html#20081016a The OVAL Interpreter has been updated to Version 5.5.4. Thu, 16 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001a Version 5.5 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001b The OVAL Interpreter has been updated to Version 5.5. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001d Secure Elements, Inc. and Hewlett-Packard received the "OVAL Repository Top Contributors Awards" for Q3-2008. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20081001c The OVAL Team contributed to OVAL-related workshops and MITRE hosted a Making Security Measurable table booth at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2008 on September 23-25, 2008 in Gaithersburg, Maryland, USA. Wed, 1 Oct 2008 8:00:00 EDT http://oval.mitre.org/news/index.html#20080910a Version 5.5 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on October 1, 2008. Wed, 10 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080904a OVAL has partnered with the U.S. National Institute of Standards and Technology (NIST) to replace the OVAL Compatibility program with two independent but complementary efforts, an "OVAL Adoption Program" managed by MITRE and the "Security Content Automation Protocol (SCAP) Validation Program" managed by NIST. Tue, 2 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080904b Draft 2 of Version 5.5 of the OVAL Language is now available. Version 5.5, currently in the Draft stage, is scheduled to be moved to the Release Candidate stage on September 10, 2008 and the Official stage on October 1, 2008. Tue, 2 Sep 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814a Version 5.5 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on September 18, 2008. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814b The OVAL Repository now includes coverage for the Cisco IOS operating system, in addition to coverage for UNIX and Windows. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814c OVAL will be included as a topic at the U.S. National Institute of Standards and Technology’s (NIST) Security Automation Conference & Workshop 2008 on September 23-25, 2008 in Gaithersburg, Maryland, USA. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080814d OVAL participated in a Making Security Measurable booth at Black Hat Briefings 2008 on August 6-7, 2008 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Wed, 13 Aug 2008 10:00:00 EDT http://oval.mitre.org/news/index.html#20080724a GFI Software Ltd., Hewlett-Packard, and Secure Elements, Inc. received the "OVAL Repository Top Contributors Awards" for Q2-2008. Wed, 23 Jul 2008 8:15:00 EDT http://oval.mitre.org/news/index.html#20080724b Maitreya Security Ltd. Co. declared that the Dharma Repository will be OVAL-Compatible. Wed, 23 Jul 2008 8:15:00 EDT http://oval.mitre.org/news/index.html#20080710a OVAL is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2008 on August 6-7, 2008 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA. Mon, 7 Jul 2008 8:25:00 EDT http://oval.mitre.org/news/index.html#20080626a MITRE hosted a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA. Mon, 7 Jul 2008 8:25:00 EDT http://oval.mitre.org/news/index.html#20080605a Version 5.3 of the OVAL Interpreter was included in Debian’s April 21, 2008 release of Ubuntu 8.04. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605b Meeting minutes from this year’s OVAL Developer Days conference held on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA are now available. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605d CVE Compatibility Lead/CWE Program Manager Robert A. Martin and CVE Technical Lead/CWE Technical Lead Steven M. Christey presented a Making Security Measurable briefing and hosted a half-day Making Security Measurable tutorial at AusCERT 2008 on May 18-23, 2008 at Royal Pines Resort in Gold Coast, Australia. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080605c CVE Compatibility Lead/CWE Program Manager Robert A. Martin presented a briefing about Making Security Measurable at the 4th Annual GFIRST Conference on June 2-4, 2008 at the Caribe Royale Hotel in Orlando, Florida, USA. Tues, 3 Jun 2008 13:50:00 EDT http://oval.mitre.org/news/index.html#20080515a OVAL was the main topic of an April 30, 2008 news release by Secure Elements Receives OVAL Repository Top Contributor Award for Advancing Open Information Security Content Standard. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515a OVAL was the main topic of an April 30, 2008 news release by Secure Elements Receives OVAL Repository Top Contributor Award for Advancing Open Information Security Content Standard. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515b Briefing slides from this year’s OVAL Developer Days conference held on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA are now available on the OVAL Developer Days page. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515c CVE Compatibility Lead/CWE Project Manager Robert A. Martin and CVE Technical Lead/CWE CVE Technical Lead Steven M. Christey are scheduled to present a Making Security Measurable briefing and host a full-day Making Security Measurable tutorial at AusCERT 2008 on May 18-23, 2008 at Royal Pines Resort in Gold Coast, Australia. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515d CVE Compatibility Lead/CWE Project Manager Robert A. Martin is scheduled to present a briefing about Making Security Measurable at the 4th Annual GFIRST Conference on June 2-4, 2008 at the Caribe Royale Hotel in Orlando, Florida, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515e MITRE is scheduled to host a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080515f CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a 2008 IEEE Conference on Technologies for Homeland on May 12-13, 2008 at the Westin Hotel in Waltham, Massachusetts, USA. Thur, 15 May 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501a The OVAL Team hosted this year’s OVAL Developer Days conference on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501b TMC y Cia declared that its vulnerability analysis service, FAV - Falcon Analisis de Vulnerabilidades, is OVAL-Compatible. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501c CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a Making Security Measurable briefing entitled "Architecting Security Measurement and Management for Compliance" at CSI Security Exchange 2008 on April 27, 2008 at Mandalay Bay Convention Center in Las Vegas, Nevada, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501d CVE Compatibility Lead/CWE Project Manager Robert A. Martin presented a Making Security Measurable briefing entitled "Architecting Your IT Security Standards to Secure your Enterprise" at GOVSEC on April 24, 2008 at Walter E. Washington Convention Center in Washington, D.C., USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080501e MITRE hosted a Making Security Measurable exhibitor booth at RSA 2008 on April 7-11, 2008 at the Moscone Center in San Francisco, California, USA. Wed, 30 Apr 2008 9:00:00 EDT http://oval.mitre.org/news/index.html#20080410a Version 5.4 OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files on the SourceForge.net Web site at http://sourceforge.net/projects/ovaldi/ have also been updated. Thu, 10 Apr 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080410b The OVAL Interpreter has been updated to Version 5.4. Specific updates to the OVAL Interpreter included: addition of support for Version 5.4 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Thu, 10 Apr 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080307a Version 5.4 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on March 28, 2008. Fri, 7 Mar 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080307b OVAL was mentioned in a March 3, 2008 article entitled "SCAP narrows security gap" in Government Computer News. Fri, 7 Mar 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222a MITRE is scheduled to host our OVAL Developer Days conference on April 28-29, 2008 at MITRE Corporation in Bedford, Massachusetts, USA. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222b Lieberman Software Corporation declared that its system security reporting, management, and remediation product, User Manager Pro, will be OVAL-Compatible. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080222c MITRE is scheduled to host a Making Security Measurable exhibitor booth at InfoSec World Conference & Expo 2008 on March 10-11, 2008 at the Rosen Shingle Creek Resort in Orlando, Florida, USA. Thu, 21 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080214a The OVAL Interpreter has been updated to address several bugs found by Lumension Security, Inc. and others. Thu, 14 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201a The OVAL Interpreter and data files will now be hosted on the SourceForge.net Web site at http://sourceforge.net/projects/ovaldi/. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201b OVAL was mentioned in a January 13, 2008 article entitled "PC Lockdown in the Government and Beyond" in eWeek Magazine. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201c MITRE hosted a Making Security Measurable exhibitor booth at the 2008 Information Assurance Workshop on January 28 - February 1, 2008 at the Philadelphia Marriott Downtown in Philadelphia, Pennsylvania, USA. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080201d Meeting minutes for the OVAL Board teleconference held on Monday, January 14, 2008 have been posted on the Discussion Archives page. Fri, 1 Feb 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117a Hewlett-Packard and Maitreya Security Ltd. Co. received the "OVAL Repository Top Contributors Awards" for Q4-2007. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117b The OVAL Interpreter has been updated to incorporate several bug fixes and community code contributions. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080117c The OVAL Board held a teleconference on Monday, January 14, 2007 with 20 members participating. Thu, 17 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20080103a MITRE has announced its initial Making Security Measurable calendar of events for the first half of 2008. Thu, 3 Jan 2008 15:00:00 EDT http://oval.mitre.org/news/index.html#20071220a OVAL began five years ago this month as a new community baseline standard for how vulnerabilities could be identified on local computers. Thu, 20 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071220b The OVAL Repository surpassed the 5,000 OVAL Definitions milestone on December 14, 2007 with a new grand total of 5,061 definitions now available to the public on the OVAL Web site. Of these, there are 1,576 definitions for Microsoft Windows and 3,485 definitions for UNIX. Thu, 20 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071206a Red Hat, Inc. has incorporated the OVAL Interpreter into the latest releases of Fedora 7 and Fedora 8. Thu, 06 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071206b MITRE is scheduled to host a Making Security Measurable exhibitor booth at the 2008 Information Assurance Workshop on January 28 - February 1, 2008 at the Philadelphia Marriott Downtown in Philadelphia, Pennsylvania, USA. Thu, 06 Dec 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108a Ai Metrix, a SYS Technologies Company, declared that its network management system for Security Content Automation Protocol (SCAP) services and reporting, NeuralStar Network, will be OVAL-Compatible. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108b OVAL was mentioned in the "Product Releases" article in Processor Magazine on October 5, 2007. OVAL is mentioned in the "Security" section of the article regarding Secure Elements' C5 Compliance Platform 3.3. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108c OVAL was mentioned in a September 18, 2007 news release from Secure Elements, Inc. entitled "Secure Elements Announces New Version of IT Audit and Compliance Platform." OVAL is mentioned in the portion of the release that describes how Secure Elements' C5 Compliance Platform Version 3.3 adds enhanced NIST SCAP FISMA reporting. Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071108d The OVAL Repository was the main topic of an October 23, 2007 news release from Secure Elements, Inc. entitled "Secure Elements Receives OVAL Repository Top Contributor Award For Advancing Open Information Security Content Standards for the 3rd Quarter of 2007." Thu, 08 Nov 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071018a Maitreya Security Ltd. Co., Opsware, Inc., Secure-Elements, Inc., and ThreatGuard, Inc. received the "OVAL Repository Top Contributors Awards" for Q3-2007. Thu, 18 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071018b OVAL was mentioned in an article entitled "Service-oriented security" in NetworkWorld on September 25, 2007. Thu, 18 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004a eEye Digital Security, Inc. has declared that its network security risk assessment and vulnerability management products, Retina Network Security Scanner and Retina Enterprise Suite, will be OVAL-Compatible. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004b OVAL was the main topic of an August 20, 2007 article written by OVAL Board member Amol Sarwate of Qualys, Inc. entitled "Hot or not: Open Vulnerability Assessment Language" in SC Magazine. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20071004c OVAL was included as a topic at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 19-20, 2007 in Gaithersburg, Maryland, USA. Thu, 04 Oct 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906a eEye Digital Security, Inc. has declared that its network security risk assessment and vulnerability management products, Retina Network Security Scanner and Retina Enterprise Suite, will be OVAL-Compatible. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906b MITRE will host a Making Security Measurable exhibitor booth at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 19-20, 2007 in Gaithersburg, Maryland, USA. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070906c MITRE hosted a Making Security Measurable exhibitor booth at Black Hat Briefings 2007 on August 1-2, 2007 at Caesars Palace in Las Vegas, Nevada, USA. Thu, 06 Sep 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070823a McAfee, Inc. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for its Hercules Policy Auditor 4.5 and Hercules Remediation Manager 4.5 products, which are both now registered as "Officially OVAL-Compatible." Thu, 23 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070823b Guidance Software, Inc. has declared that its EnCase Information Assurance Suite will be OVAL-Compatible. Thu, 23 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070802a OVAL will be included as a topic at the U.S. National Institute of Standards and Technology's (NIST) Security Automation Conference & Workshop 2007 on September 18-19, 2007 in Gaithersburg, Maryland, USA. Thu, 2 Aug 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070802b The OVAL Board held a teleconference on Monday, July 16, 2007 with 25 members participating. Thu, 2 Aug 2007 http://oval.mitre.org/news/index.html#20070712 ThreatGuard, Inc., Secure-Elements, Inc., and Opsware, Inc. received the "OVAL Repository Top Contributors Awards" for Q2-2007. Thu, 12 Jul 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627a Version 5.3 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files have also been updated. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627b The OVAL Interpreter has been updated to Version 5.3. Specific updates to the OVAL Interpreter included: addition of support for Version 5.3 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627c The OVAL Repository now contains more than 2,000 OVAL Definitions. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627d Updated Guidelines for Submitting OVAL Definitions have been posted in the OVAL Repository section of the OVAL Web site. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070627e OVAL was mentioned in a May 22, 2007 article entitled "NIST releases FISMA security control tools" in Government Computer News. Wed, 27 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601a A second Release Candidate of Version 5.3 of the OVAL Language is now available. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601b Opsware, Inc. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for its Opsware Server Automation System. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070601c Roger Castillo of AlterPoint has joined the OVAL Board. Fri, 01 Jun 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070517a Version 5.3 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on June 6, 2007. Thu, 17 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503a Opsware Inc. has achieved the second phase of the OVAL Compatibility Program by posting an OVAL Compatibility Questionnaire for Opsware Server Automation System and OVAL Compatibility Questionnaire for Opsware Network. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503b US Army CERDEC has declared that its vulnerability assessment and remediation tool, Armadillo, will be OVAL Compatible. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503c OVAL was included as a product feature in a March 19, 2007 product review article entitled "Rollout: Kace KBox 1000/2000 Series Appliances" in Network Computing. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070503d ThreatGuard, Inc. and Centennial Software Ltd. received the "OVAL Repository Top Contributors Awards" for Q1-2007. The awards serve as public recognition of an organization's support of the OVAL Repository and as an incentive to others to contribute. Thu, 03 May 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419a GFI Software Ltd. has completed correctness testing for Phase 3 of the OVAL Compatibility Program for GFI LANguard Network Security Scanner, its network vulnerability assessment and remediation product. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419b Security-Database.com has completed correctness testing for Phase 3 of the OVAL Compatibility Program for System Security Analyzer, its vulnerability assessment and policy compliance product. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419c Opsware Inc. has declared that its Opsware Server Automation System, and its Opsware Network content repository, will be OVAL Compatible. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070419d MITRE held an OVAL Compatibility Correctness Testing session on April 11, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.2 of OVAL. Thu, 19 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070405a Version 5.3 of the OVAL Language is currently in the Draft stage and is scheduled to be moved to the Official stage on May 7, 2007. Thu, 05 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070405b MITRE will hold an OVAL Compatibility Correctness Testing session on April 11, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.2 of OVAL. Thu, 05 Apr 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301a GFI Software Ltd. has declared that its network vulnerability assessment and remediation product, GFI LANguard Network Security Scanner, will be OVAL Compatible. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301b McAfee, Inc. has achieved the second phase of the OVAL Compatibility Program by posting an OVAL Compatibility Questionnaire for Hercules Policy Auditor 4.2 and OVAL Compatibility Questionnaire for Hercules Remediation Manager 4.2. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301e OVAL was included in a February 6, 2006 news release from Secure-Elements, Inc. entitled "Secure Elements announces first ever training program for authoring standards based XML documents for system audit and compliance measurement". Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301f OVAL was cited in the description of SC Magazine’s "Editor’s Choice Professional Award" to the NSA’s Information Assurance Directorate’s Vulnerability Analysis and Operations (VAO) Group for its work in the past year with the U.S. Air Force and Microsoft Corporation. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070301g OVAL co-hosted a Making Security Measurable exhibitor booth for MITRE’s OVAL, CVE, CCE, CME, CWE, and CPE efforts at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-15, 2007 at the Wyndham Orlando Resort, in Orlando, Florida, USA. Thu, 01 Mar 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215a Configuresoft, Inc. has posted an OVAL Compatibility Questionnaire for Configuresoft Enterprise Configuration Manager for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215b NetIQ Corporation has posted an OVAL Compatibility Questionnaire for NetIQ Secure Configuration Manager for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215c The U.S. National Institute of Standards and Technology (NIST) has posted an OVAL Compatibility Questionnaire for Security Content Automation Program Content for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215d ThreatGuard, Inc. has posted an OVAL Compatibility Questionnaire for Secutor Prime for Phase 2 of the OVAL Compatibility Program and has completed the Phase 3 correctness testing. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215e MITRE hosted an OVAL/CVE/CCE/CME/CWE/CPE exhibitor booth at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-15, 2007 at the Wyndham Orlando Resort, in Orlando, Florida, USA. Thu, 15 Feb 2007 15:00:00 EDT http://ovaldev1.mitre.org/news/index.html#20070215f MITRE hosted an OVAL/CVE/CCE/CME/CWE/CPE exhibitor booth at RSA Conference 2007 on February 5-8, 2007 at the Moscone Center in San Francisco, California, USA. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070215g With the help of government and commercial vendors, MITRE held an OVAL Demonstration across the exposition floor of RSA Conference 2007 on February 5-8, 2007 in San Francisco, California, USA. Thu, 15 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070202a MITRE has launched an "OVAL Repository Top Contributors Award Program" that grants awards on a quarterly basis to the top contributors to the OVAL Repository. Fri, 02 Feb 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070131a Version 5.2 of OVAL has been moved to the "Official" stage and is now available on the OVAL Language Releases page. The OVAL Interpreter, Interpreter Source Code, and Data Files have also been updated. Wed, 31 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070131b The OVAL Interpreter has been updated to Version 5.2. Specific updates to the OVAL Interpreter included: addition of support for Version 5.2 of the OVAL Language and fixing some minor issues reported by the OVAL Community. Wed, 31 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125a Version 5.2 of the OVAL Language is currently in the Release Candidate stage and is scheduled to be moved to the Official stage on January 31, 2007. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125b MITRE held an OVAL Compatibility Correctness Testing session on January 17, 2007 at MITRE in Bedford, Massachusetts, USA to test products against Version 5.1 of OVAL. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125c With the help of both government and commercial vendors, MITRE has organized an OVAL Demonstration to be held across the exposition floor of RSA Conference 2007 on February 5-8, 2007 at the Moscone Center in San Francisco, California, USA. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125d Security-Database.com declared that its vulnerability assessment and policy compliance product, System Security Analyzer, will be compatible with Version 5.1 of OVAL. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125e The OVAL Board held a teleconference on Tuesday, January 16, 2007, with representatives from 7 member organizations and others participating. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070125f The OVAL Repository Updates RSS feed can now be customized to a user's preferences. Thu, 25 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104a MITRE will hold an OVAL Compatibility Correctness Testing session on January 17, 2007 at MITRE in Bedford, Massachusetts Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104b MITRE is scheduled to host an OVAL/CVE/CCE/CWE/CME exhibitor booth at RSA Conference 2007 on February 5-8, 2007 Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104c MITRE is scheduled to host an OVAL/CVE/CCE/CWE/CME exhibitor booth at the 11th annual 2007 Information Assurance (IA) Workshop on February 12-16, 2007 Thu, 4 Jan 2007 15:00:00 EDT http://oval.mitre.org/news/index.html#20070104d Due to business disaster planning activities the OVAL Web site may be temporarily unavailable for short periods Thu, 4 Jan 2007 15:00:00 EDT