Additional Resources

The following resources are related standards, OVAL documentation, and other helpful information. Suggested additions or deletions can be submitted through the OVAL Community Discussions.

Resources

• OVAL Community Repository The official repository for OVAL development, maintenance, issue tracking, enhancement proposals, etc.
• OVAL Developer Guide The OVAL Developer Guide was written by MITRE, the previous OVAL Sponsor.
• Security Content Automation Protocol (SCAP) home SCAP is a set of standards defined by NIST that includes OVAL.
• Naval Information Warfare Center (NIWC) The website for the current OVAL Sponsor.

Related Standards

• The eXtensible Configuration Checklist Description Format XCCDF defines a structured collection of security configuration rules for some set of target systems.
• Script Check Engine SCE defines a check system allowing XCCDF rules to evaluate compliance based on the results of execution of scripts in various scripting languages.

Archive

Historical and archived information regarding previous versions of OVAL, prior sponsor documentation, etc. may be found at the following resources:

• MITRE OVAL Homepage Deprecated website containing historical OVAL data.
• MITRE OVAL Archives The OVAL Language archives.
• OVAL Mailing List Archives An archive of OVAL-related mailing list discussions.
• OVAL Language Schemas Up to and including OVAL v5.11.2, the OVAL Language GitHub repository provides the official OVAL language documentation, schemas, and tools used in the development of OVAL interpreters.
• OVAL Language Sandbox The OVAL Language Sandbox, hosted on GitHub.com, provides a collaborative environment for the community to propose and develop experimental capabilities for the OVAL Language.
• NIST XCCDF Homepage XCCDF is a specification language for writing security checklists, benchmarks, and related kinds of documents.