[ news_security_news ]
Citadel To Be Compatible With OVAL
SecurityProNews
Staff Writer
2004-12-20
 Insider Reports RSS Feed
Citadel Security Software announced its plan to be compatible with MITRE's OVAL Results Schema, enabling customers to remediate vulnerabilities identified by OVAL-compatible scanning tools.
With a myriad of different ways to describe and report on vulnerabilities, organizations face the challenge of integrating the output of various tools in order to report and act on their results. By providing interoperability between tools for vulnerability identification and management, OVAL facilitates the exchange of information that can extend a unified solution across the enterprise.
With Citadel integrating the ability to read results from the OVAL Results Schema, Hercules will import results from vulnerability scanners or other network tools that produce output in an OVAL Results Schema format to quickly remediate vulnerabilities. Additionally, Citadel will be integrating other aspects of OVAL such as OVAL Compliance Definitions, Patch Definitions, and Vulnerability Definitions.
"Both Citadel and OVAL address and advocate dealing with all aspects of vulnerabilities and misconfigurations," said Matthew Wojcik, Senior Information Security Engineer and OVAL Moderator, The MITRE Corporation. "Together, we are on the forefront of those actively working to simplify identifying and exchanging information about these various aspects of flaws. As the first vulnerability management company to make its declaration for compatibility with OVAL Results Schema, Citadel is demonstrating its commitment to adopting standards and enabling integration between security tools."
"With OVAL positively impacting the global computing community, we are proud to contribute to its leadership efforts on providing security interoperability standards," said Carl Banzhof, CTO of Citadel Security Software and OVAL Board member. "Through our work with DISA, we understand why federal agencies rely on OVAL vulnerability identification and reporting standards and are dedicated to providing the compatibility and integration that can greatly ease their vulnerability management burden."
OVAL is the common language for security experts to discuss and agree upon technical details about how to check for the presence of vulnerabilities on computer systems. OVAL definitions are based primarily on Common Vulnerabilities and Exposures (CVE), a dictionary of standardized names and descriptions for publicly known information security vulnerabilities and exposures developed by MITRE in cooperation with the international security community.
The OVAL Board creates and/or approves the official common OVAL Schema and evaluates and reviews definitions for posting on the OVAL Web site. The Board includes representatives from a broad spectrum of industry, academia and government organizations. OVAL also involves community participation with system administrators, software vendors, security analysts and other members of the information security community. This means OVAL definitions reflect the insights and combined expertise of the broadest possible collection of security and system administration professionals.
Citadel's Hercules is the first enterprise-class vulnerability remediation solution to automate the resolution of all classes of vulnerabilities. With the largest library of tested vulnerability remedies across Windows and UNIX platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules has been successfully deployed across large commercial and government enterprises.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
