Author Description

About the Book: Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP The first book on the market to explain information securityautomation technologies Covers SCAP (Security Content Automation Protocol) technologies,which help automate and streamline network security practices Includes case studies and bonus content online from theauthors-renowned IT security experts Large and growing market-as of 2008, the U.S. governmentpurchases only SCAP-compliant products and services Contents Part I Security Automation Essentials 1 The Security Management Problem 2 What Is SCAP? Part II Using SCAP 3 SCAP Checklist and Check Languages 4 Asset Management 5 Enumerations 6 SCAP Vulnerability Measurement Part III Putting It All Together 7 Building Automated Security Content 8 Putting Security Automation to Work in the Enterprise 9 Conclusion A XCCDF, OVAL, OCIL, and Supporting Enumerations Usage About the Authors: Greg Witte, Melanie Cook, Matt Kerr, Shane Shaffer Greg Witte leads the U.S. Federal civilian customer support teamat G2, Inc., a security firm committed to solving the most complexchallenges related to the ability of the U.S. to collect, utilize,and defend digital information. Melanie Cook is an information systems engineer at G2, Inc. Shepreviously worked at the National Security Agency and at theNational Institute of Standards and Technology where shecontributed to SCAP efforts. Matt Kerr is G2's Director of Research and Development. Hehelped develop the DISA Gold Disk application, the primarycompliance assessment utility for Department of Defensesystems. Shane Shaffer is the Technical Director of Security Automationfor G2. He served as the lead architect of the Department ofDefense's Vulnerability Management System and has been a keycontributor to the development of SCAP.