RE: [scap-dev-authoring] Day 2 Deep Dive topic suggestion
Lubell, Joshua (Fed)
Hi all,
I’ve created a tool called “SCAP Composer” that I think might be of interest as a day 2 Deep Dive topic.
SCAP Composer implements a simple content authoring XML language specifically for SCAP source data streams. The language enables you to easily combine components such as OVAL definitions, XCCDF Benchmark documents, CPE dictionaries, etc. into an SCAP source data stream collection without having to deal with SP 800-126 source data stream collection data model syntax. Unlike frameworks such as Scapolite and Compliance-as-Code, SCAP Composer has a very narrow scope and can be combined with other solutions (e.g., scaptain) as part of an all-purpose authoring framework. Because SCAP Composer is lightweight and not part of a larger SCAP ecosystem, it does not depend on any particular operating system, directory structure, or SCAP scanner.
SCAP Composer uses the Darwin Information Typing Architecture (DITA), a standard for organizing and transforming topic-oriented technical content. SCAP Composer treats source data stream elements (data-stream, dictionaries, component-ref, checklists, checks) as DITA maps, which are aggregations of topics and/or other maps. SCAP Composer uses the DITA Open Toolkit, an open source implementation of the DITA standard that is used in many XML authoring tools, but can also be used standalone with an XML-friendly text editor.
Please let me know if SCAP Composer might be of interest to the group. If so, I can discuss it further during tomorrow’s telecon.
-Josh
Joshua Lubell
Systems Integration Division
National Institute of Standards and Technology
100 Bureau Drive, Stop 8260
Gaithersburg MD 20899-8260 USA
From: Charles Schmidt <schmidt....@gmail.com>
Sent: Friday, August 16, 2019 4:30 PM
To: scap-dev-authoring <scap-dev-...@list.nist.gov>
Subject: [scap-dev-authoring] Proposed sub-team summary templates for September SCAP v2 workshop
Hi all,
NIST’s SCAP v2 workshop in Rockville, MD is only a few weeks away (Sept 17-19). In the draft agenda that was posted on the registration page (https://scap.regfox.com/scap-v2-workshop-september-2019) the plan is to have all active sub-teams start day 1 with a short presentation (30 minutes allocated, but that would include questions) summarizing their status and activities since the April workshop. The sub-teams then have a 90-minute block of time on day 2 where it is hoped they will engage the broader community on topics that would be good to discuss more broadly than just in the sub-team calls.
For the short summary presentations on day 1, we have put together a suggested template for the presentation. We have also put together an example of the template filled out for the XCCDF and Content Authoring sub-team. (This is provided just as an example. The actual Content Authoring presentation will likely change significantly.) You don’t need to restrict yourself to the template, but it would be beneficial to hit the points the template identifies.
In your upcoming sub-team calls, please identify someone who would be willing to given the day-1 summary presentation, and consider topics that would be valuable to discuss in front of the full community on the day-2 deep-dives.
We look forward to further productive discussions when we get together in September.
Thanks,
Charles
P.S. – If you haven’t done so, please make sure to register for the workshop at https://scap.regfox.com/scap-v2-workshop-september-2019
--
To unsubscribe from this group, send email to
scap-dev-author...@list.nist.gov
Visit this group at https://list.nist.gov/scap-dev-authoring
---
To unsubscribe from this group and stop receiving emails from it, send an email to
scap-dev-author...@list.nist.gov.
Bill Munyan
Lubell, Joshua (Fed)
Hi Bill,
I can certainly give a demo.
Joshua Lubell
Systems Integration Division
National Institute of Standards and Technology
100 Bureau Drive, Stop 8260
Gaithersburg MD 20899-8260 USA