CEE Announce - August 17, 2012 (opt-in newsletter from the CEE Web site)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

CEE Announce - August 17, 2012 (opt-in newsletter from the CEE Web site)

Welcome to the latest issue of the CEE-Announce e-newsletter. This email
newsletter is designed to bring recent news about CEE, such as new versions
of the language specifications, upcoming conferences, new Web site features,
etc. right to your email box. Common Event Expression (CEE) standardizes the
way computer events are described, logged, and exchanged. By using CEE's
common language and syntax, enterprise-wide log management, correlation,
aggregation, auditing, and incident handling can be performed more
efficiently and produce better results than was possible prior to CEE.
Details on subscribing (and unsubscribing) to the email newsletter are at
the end.

Please feel free to pass this newsletter on to interested colleagues.

Comments: [hidden email]

CEE-Announce e-newsletter/August 17, 2012

1. Feature Story
2. Upcoming Event
3. Also in this Issue
4. CEE Community Discussion List Sign-Up
5. Details/Credits + Subscribing and Unsubscribing


Four CEE Language Specifications Updated to Version 1.0-beta1

Version 1.0-beta1 of the CEE Language specification documents are now
available on the CEE Web site. A detailed report is available that lists
specific changes between Version 1.0-alpha and Version 1.0-beta1 at

The following four community-developed specifications have been updated to
Version 1.0-beta1:

* CEE Overview Specification, Version 1.0-beta1 - Provides a high-level
overview of CEE along with details on the overall architecture and
introduces each of the CEE components including the CEE Profile, CEE Log
Syntax, and the CEE Log Transport. The CEE Overview is the first in a
collection of documents and specifications, whose combination provides the
necessary pieces to create the complete CEE event log standard.

* CEE Profile Specification, Version 1.0-beta1 - The CEE Profile allows for
the improved interpretation and analysis of event data by allowing users to
define how events are structured and what data they provide. The Profile
consists of three components that provide a standardize field dictionary and
base requirements for CEE-compatible events.

* CEE Common Log Syntax (CLS) Specification, Version 1.0-beta1 - Describes
the requirements for encoding and decoding for a Common Event Expression
(CEE) Event, and provides encoding declarations for XML and JSON event

* CEE Common Log Transport (CLT) Specification, Version 1.0-beta1 - Provides
the technical support necessary for a secure and reliable log
infrastructure. The CLT document defines a listing of requirements
conformant log transports must meet. In addition, the CLT defines transport
mappings, which define a standard methodology for transmitting encoded CEE
Event Records over certain protocols.

We encourage community members to offer feedback on these documents on the
CEE Email Discussion list. You may also contact us directly at
[hidden email].


CEE Architecture Overview Specification, Version 1.0-beta1 -

CEE Profile Specification, Version 1.0-beta1 -

CEE Log Syntax (CLS) Specification, Version 1.0-beta1 -

CEE Log Transport (CLT) Specification, Version 1.0-beta1 -

Participate - http://cee.mitre.org/community/discussiongroup.html


CEE/Making Security Measurable Booth at "2012 Information Assurance Expo,"
August 27-30

MITRE will host a CEE/Making Security Measurable booth at "2012 Information
Assurance Expo" on August 27-30, 2012 at Gaylord Opryland Resort and
Convention Center in Nashville, Tennessee, USA.

Please visit us at Booth 217 and say hello!

Visit the CEE Calendar for information on this and other events.


2012 Information Assurance Expo - http://www.informationassuranceexpo.com/

Making Security Measurable - http://measurablesecurity.mitre.org/

CEE Calendar - http://cee.mitre.org/news/calendar.html


* CEE Briefing Slides from "Security Automation Developer Days 2012" Now

* MITRE Hosts CEE/Making Security Measurable Booth at "Black Hat Briefings

Read these stories and more news at http://cee.mitre.org/news


The CEE Community email discussion list is a lightly moderated public forum
to discuss the CEE specifications, CEE Schemas, and related issues. General
discussion of all aspects of the audit and event lifecycle and related
topics is also welcome.

Sign-up today, or recommend the CEE Community discussion list to interested


Community Discussion List Sign-Up -

Privacy Policy - http://cee.mitre.org/privacy.html

Details/Credits + Subscribing and Unsubscribing

Managing Editor: John Wunder. Writer: Bob Roberge. The MITRE Corporation
(www.mitre.org) maintains CEE and provides impartial technical guidance to
the CEE Board and Working Group on all matters related to ongoing
development of CEE.

To unsubscribe from the CEE-Announce e-newsletter, open a new email message
and copy the following text to the BODY of the message "SIGNOFF
CEE-Announce-List", then send the message to: [hidden email]. To
subscribe, send an email message to [hidden email] with the
following text in the BODY of the message: "SUBSCRIBE CEE-Announce-List".

Copyright 2012, The MITRE Corporation. CEE and the CEE logo are trademarks
of The MITRE Corporation.

For more information about CEE, visit the CEE Web site at
http://cee.mitre.org or send an email to [hidden email]. Learn more about
Making Security Measurable at http://measurablesecurity.mitre.org.