Secure Coding mailing list archives

The Next Frontier

From: ljknews at mac.com (ljknews)
Date: Wed, 27 Jun 2007 17:08:19 -0400

At 4:38 PM -0400 6/27/07, Paco Hope wrote:

On 6/26/07 5:00 PM, "McGovern, James F (HTSC, IT)" <James.McGovern at thehartford.com> wrote:

Would there be value in terms of defining an XML schema that all tools could emit audit information to?

You might want to take a look at what the Fortify guys already do. Their "FVDL" (Fortify Vulnerability Description 
Language) is XML written to a specific schema


In the US, the federal government has a lot of that going on:

http://nvd.nist.gov/scap.cfm

but they only support certain platforms, like Windows.
-- 
Larry Kilgallen

Current thread:

Interesting tidbit in iDefense Security Advisory 06.26.07 Kenneth Van Wyk (Jun 26)
- Interesting tidbit in iDefense Security Advisory 06.26.07 Steven M. Christey (Jun 26)
- Interesting tidbit in iDefense Security Advisory 06.26.07 Wall, Kevin (Jun 26)
  - Interesting tidbit in iDefense Security Advisory 06.26.07 Paco Hope (Jun 26)
    - Interesting tidbit in iDefense Security Advisory 06.26.07 Steven M. Christey (Jun 26)
  - The Next Frontier McGovern, James F (HTSC, IT) (Jun 26)
    - The Next Frontier Paco Hope (Jun 27)
    - The Next Frontier ljknews (Jun 27)
    - The Next Frontier Steven M. Christey (Jun 27)
    - The Next Frontier McGovern, James F (HTSC, IT) (Jun 28)
- Interesting tidbit in iDefense Security Advisory 06.26.07 J. M. Seitz (Jun 26)
  - Interesting tidbit in iDefense Security Advisory 06.26.07 Leichter, Jerry (Jun 27)
    - Comparing Software Vendors McGovern, James F (HTSC, IT) (Jun 28)
- Interesting tidbit in iDefense Security Advisory 06.26.07 Florian Weimer (Jun 29)
- <Possible follow-ups>
- Interesting tidbit in iDefense Security Advisory 06.26.07 David A. Wheeler (Jun 28)
  - Interesting tidbit in iDefense Security Advisory 06.26.07 J. M. Seitz (Jun 28)
    - Interesting tidbit in iDefense Security Advisory 06.26.07 Leichter, Jerry (Jun 28)
    - Interesting tidbit in iDefense Security Advisory 06.26.07 David A. Wheeler (Jun 28)