.. _addtional-resources:

Additional Resources
=====================

The following resources are related standards, OVAL documentation, and other helpful information. Suggested additions or deletions can be submitted through the `OVAL Community Discussions <https://github.com/orgs/OVAL-Community/discussions>`_.

Resources
---------

* `OVAL Community Repository <https://github.com/OVAL-Community/OVAL>`_ *The official repository for OVAL development, maintenance, issue tracking, enhancement proposals, etc.*
* `OVAL Developer Guide <http://ovalproject.github.io/getting-started/best-practices/>`_ *The OVAL Developer Guide was written by MITRE, the previous OVAL Sponsor.*
* `Security Content Automation Protocol (SCAP) home <https://csrc.nist.gov/projects/security-content-automation-protocol>`_ *SCAP is a set of standards defined by NIST that includes OVAL.*
* `Naval Information Warfare Center (NIWC) <https://www.niwcatlantic.navy.mil/Technology/SCAP/>`_ *The website for the current OVAL Sponsor.*

Related Standards
-----------------
* `The eXtensible Configuration Checklist Description Format <https://www.iso.org/standard/61713.html>`_ *XCCDF defines a structured collection of security configuration rules for some set of target systems.*
* `Script Check Engine <https://www.open-scap.org/features/other-standards/sce/>`_ *SCE defines a check system allowing XCCDF rules to evaluate compliance based on the results of execution of scripts in various scripting languages.*

Archive
-------

Historical and archived information regarding previous versions of OVAL, prior sponsor documentation, etc. may be found at the following resources:

* `MITRE OVAL Homepage <http://oval.mitre.org/>`_ *Deprecated website containing historical OVAL data.*
* `MITRE OVAL Archives <http://oval.mitre.org/archive/>`_ *The OVAL Language archives.*
* `OVAL Mailing List Archives <http://making-security-measurable.1364806.n2.nabble.com/OVAL-Open-Vulnerability-and-Assessment-Language-f20093.html>`_ *An archive of OVAL-related mailing list discussions.*
* `OVAL Language Schemas <https://github.com/OVALProject/Language>`_ *Up to and including OVAL v5.11.2, the OVAL Language GitHub repository provides the official OVAL language documentation, schemas, and tools used in the development of OVAL interpreters.*
* `OVAL Language Sandbox <https://github.com/OVALProject/Sandbox>`_ *The OVAL Language Sandbox, hosted on GitHub.com, provides a collaborative environment for the community to propose and develop experimental capabilities for the OVAL Language.*
* `NIST XCCDF Homepage <https://csrc.nist.gov/projects/security-content-automation-protocol/scap-specifications/xccdf>`_ *XCCDF is a specification language for writing security checklists, benchmarks, and related kinds of documents.*