Announcing Common Platform Enumeration (CPE) Developer Days Workshop

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Announcing Common Platform Enumeration (CPE) Developer Days Workshop

Brant Cheikes

We are pleased to announce the Common Platform Enumeration (CPE) Developer Days Workshop.

 

What is the CPE Developer Days Workshop?

The CPE Developer Days Workshop is a one-day event that is sponsored by the DoD, hosted by the National Institute of Standards and Technology (NIST), and facilitated by the MITRE Corporation. It is one of a series of co-located Developer Days workshops, each focusing on a single component or technical topic related to the NIST Security Content Automation Protocol (SCAP).

 

What is the purpose of the CPE Developer Days Workshop?

The purpose of the workshop is to elicit stakeholder-defined requirements and identify the near term mission-critical target capabilities that CPE must support in order to be successful.  Success will be measured by CPE’s ability to:

  • achieve significant and growing vendor support;
  • stimulate increasing volumes of product data contributed by the community to the CPE Dictionary;
  • be acceptable to NIST for inclusion in a future release of SCAP;
  • be deployed in product offerings to foster inter-vendor tool interoperability;
  • be manageable across time and scale for large deployments.

 

What will the workshop accomplish?

Workshop objectives are to:

  1. identify and describe near-term target capabilities that the CPE specification and content management processes must support;
  2. identify and prioritize potential changes to the CPE specification and content maintenance process in order to support the target capabilities;
  3. determine next steps that the CPE specification moderators and the user community need to take to in order to achieve the target capabilities, including holding additional CPE workshops in the future.

 

Time permitting, we will apply the outcome of steps 1-3 to:

  1. develop specific changes to the CPE specification (additions, deletions, documented implementation guidance) that must be taken in the near term to revitalize CPE adoption;
  2. develop general plans for a CPE version 3.0 specification to address shortfalls in 2.x CPE;
  3. identify and assign responsibility for supplemental efforts necessary to enable and ensure CPE adoption.

 

Who should participate?

People who fill one or more of the following roles:

  • Users of security automation tools (e.g. Network Security Engineers, Security Information Managers);

·         IT security automation tool vendors (commercial or government), independent testers, consultants;

  • Moderators of related specifications (e.g. OVAL, XCCDF, SCAP);
  • IT vendors whose software and hardware products will be described in the CPE dictionary.

 

What is the cost of attendance?

Participants are responsible for their own travel and lodging expenses.  There is no registration fee to participate in the CPE Developer Days Workshop.

 

When and where will the CPE Developer Days Workshop take place?

The Workshop will be held at NIST’s Gaithersburg campus (cf. http://www.nist.gov/public_affairs/visitor/visitor.htm). The anticipated time frame for the workshop series is sometime in late January or February, 2010.  An exact location and date range will be released in a call for participation very soon.  If you are aware of any major conflicts, such as competing workshops or conferences during that period, please notify us at [hidden email].

 

CPE Stakeholder Survey

 

Under separate cover, we will circulate a brief survey to the CPE community, intended to collect information about CPE—community views of its technical strengths and limitations, and plans for future adoption and use—to help guide decisions about near and longer-term efforts to improve it.  Responses to this survey will help us prepare an effective and focused Workshop agenda, and will provide a mechanism for those who will be unable to attend the Workshop in person to express their requirements and opinions.

 

Where can I get more information?

 

We will distribute more detailed notices soon. If you have specific questions please feel free to contact us at [hidden email].

 

Best regards,

/Brant

 

Brant A. Cheikes

Lead, MITRE CPE Project (cpe.mitre.org)
The MITRE Corporation
202 Burlington Road, M/S K302
Bedford, MA 01730-1420
Tel. 781-271-7505; Cell. 617-694-8180; Fax. 781-271-2352

 

Reply | Threaded
Open this post in threaded view
|

DATE UPDATE RE: Announcing Common Platform Enumeration (CPE) Developer Days Workshop

Brant Cheikes

The CPE Developer Days Workshop will be held on Monday, 22 February 2010, at the NIST Gaithersburg campus.  We expect we will start at 0900, and run until approximately 1700.  Note that the CPE workshop will be on the first day of three days of related security-automation workshops, covering XCCDF, remediation and digital trust.  Additional details will be forthcoming from NIST.

 

/Brant

 

Brant A. Cheikes

Lead, MITRE CPE Project (cpe.mitre.org)
The MITRE Corporation
202 Burlington Road, M/S K302
Bedford, MA 01730-1420
Tel. 781-271-7505; Cell. 617-694-8180; Fax. 781-271-2352

 

From: Cheikes, Brant A. [mailto:[hidden email]]
Sent: Friday, December 11, 2009 9:36 AM
To: cpe-discussion-list CPE Community Forum
Subject: [CPE-DISCUSSION-LIST] Announcing Common Platform Enumeration (CPE) Developer Days Workshop

 

We are pleased to announce the Common Platform Enumeration (CPE) Developer Days Workshop.

 

What is the CPE Developer Days Workshop?

The CPE Developer Days Workshop is a one-day event that is sponsored by the DoD, hosted by the National Institute of Standards and Technology (NIST), and facilitated by the MITRE Corporation. It is one of a series of co-located Developer Days workshops, each focusing on a single component or technical topic related to the NIST Security Content Automation Protocol (SCAP).

 

What is the purpose of the CPE Developer Days Workshop?

The purpose of the workshop is to elicit stakeholder-defined requirements and identify the near term mission-critical target capabilities that CPE must support in order to be successful.  Success will be measured by CPE’s ability to:

·         achieve significant and growing vendor support;

·         stimulate increasing volumes of product data contributed by the community to the CPE Dictionary;

·         be acceptable to NIST for inclusion in a future release of SCAP;

·         be deployed in product offerings to foster inter-vendor tool interoperability;

·         be manageable across time and scale for large deployments.

 

What will the workshop accomplish?

Workshop objectives are to:

1.   identify and describe near-term target capabilities that the CPE specification and content management processes must support;

2.   identify and prioritize potential changes to the CPE specification and content maintenance process in order to support the target capabilities;

3.   determine next steps that the CPE specification moderators and the user community need to take to in order to achieve the target capabilities, including holding additional CPE workshops in the future.

 

Time permitting, we will apply the outcome of steps 1-3 to:

4.   develop specific changes to the CPE specification (additions, deletions, documented implementation guidance) that must be taken in the near term to revitalize CPE adoption;

5.   develop general plans for a CPE version 3.0 specification to address shortfalls in 2.x CPE;

6.   identify and assign responsibility for supplemental efforts necessary to enable and ensure CPE adoption.

 

Who should participate?

People who fill one or more of the following roles:

·         Users of security automation tools (e.g. Network Security Engineers, Security Information Managers);

·         IT security automation tool vendors (commercial or government), independent testers, consultants;

·         Moderators of related specifications (e.g. OVAL, XCCDF, SCAP);

·         IT vendors whose software and hardware products will be described in the CPE dictionary.

 

What is the cost of attendance?

Participants are responsible for their own travel and lodging expenses.  There is no registration fee to participate in the CPE Developer Days Workshop.

 

When and where will the CPE Developer Days Workshop take place?

The Workshop will be held at NIST’s Gaithersburg campus (cf. http://www.nist.gov/public_affairs/visitor/visitor.htm). The anticipated time frame for the workshop series is sometime in late January or February, 2010.  An exact location and date range will be released in a call for participation very soon.  If you are aware of any major conflicts, such as competing workshops or conferences during that period, please notify us at [hidden email].

 

CPE Stakeholder Survey

 

Under separate cover, we will circulate a brief survey to the CPE community, intended to collect information about CPE—community views of its technical strengths and limitations, and plans for future adoption and use—to help guide decisions about near and longer-term efforts to improve it.  Responses to this survey will help us prepare an effective and focused Workshop agenda, and will provide a mechanism for those who will be unable to attend the Workshop in person to express their requirements and opinions.

 

Where can I get more information?

 

We will distribute more detailed notices soon. If you have specific questions please feel free to contact us at [hidden email].

 

Best regards,

/Brant

 

Brant A. Cheikes

Lead, MITRE CPE Project (cpe.mitre.org)
The MITRE Corporation
202 Burlington Road, M/S K302
Bedford, MA 01730-1420
Tel. 781-271-7505; Cell. 617-694-8180; Fax. 781-271-2352