Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP: Streamlined Enterprise Security Management & Monitoring with SCAP

by Greg Witte, Melanie Cook, Matt Kerr, Shane Shaffer

Overview

Master the latest digital security automation technologies

Achieve a unified view of security across your IT infrastructure using the cutting-edge techniques contained in this authoritative volume. Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP lays out comprehensive technical, administrative, and operational strategies for security management. Discover how to define baseline requirements, automatically confirm patches and updates, identify vulnerabilities, write customized auditing content, and evaluate compliance across your enterprise. Throughout, the authors provide detailed case studies and tips on selecting appropriate security components.

• Understand SCAP (Security Content Automation Protocol) technologies and standards
• Track compliance using benchmarks and scoring systems
• Build machine-readable configuration checks using XCCDF, OVAL, and OCIL
• Perform vulnerability assessments and find misconfiguration
• Maximize product interoperability through the use of standard enumeration
• Assess and monitor residual risk using CVSS values
• Use SCAP editors and XML to create and debug automated checks
• Accurately assess threats using software assurance automation

Product Details

ISBN-13:	9780071772525
Publisher:	McGraw Hill LLC
Publication date:	07/22/2012
Sold by:	Barnes & Noble
Format:	eBook
Pages:	464
File size:	11 MB
Note:	This product may take a few minutes to download.

About the Author

Greg Witte leads the U.S. Federal civilian customer support team at G2, Inc., a security firm committed to solving the most complex challenges related to the ability of the U.S. to collect, utilize, and defend digital information.

Melanie Cook is an information systems engineer at G2, Inc. She previously worked at the National Security Agency and at the National Institute of Standards and Technology where she contributed to SCAP efforts.

Matt Kerr is G2’s Director of Research and Development. He helped develop the DISA Gold Disk application, the primary compliance assessment utility for Department of Defense systems.

Shane Shaffer is the Technical Director of Security Automation for G2. He served as the lead architect of the Department of Defense’s Vulnerability Management System and has been a key contributor to the development of SCAP.

Table of Contents

Part I
Chapter 1 A Case for Automation
Chapter 2 What is SCAP?
Part II
Chapter 3 SCAP Languages
Chapter 4 SCAP Asset Reporting
Chapter 5 SCAP Enumerations
Chapter 6 SCAP Vulnerability Measurement
Part III
Chapter 7 Putting the Pieces Together
Chapter 8 Using SCAP in Your Enterprise
Chapter 9 Conclusion
Part IV: Appendixes
Appendix A SCAP Checklist
Appendix B Code Samples