Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

    Projects Security Content Automation Protocol SCAP Specifications

Security Content Automation Protocol

Project Links

Overview FAQs News Events Publications

SCAP Specifications

 

Additional Pages

Emerging SpecificationsEmerging Specification ListingAsset Summary Reporting (ASR)Release CycleSCAP ContentSCAP CommunitySCAP ReleasesSCAP 1.3SCAP 1.2SCAP 1.1SCAP 1.0SCAP SpecificationsAsset IdentificationAsset Reporting Format (ARF)Common Platform Enumeration (CPE)Applicability LanguageDictionaryNamingName MatchingOpen Vulnerability Assessment Language (OVAL)Extensible Configuration Checklist Description Format (XCCDF)Open Checklist Interactive Language (OCIL)Trust Model for Security Automation Data (TMSAD)Software Identification (SWID)

Contacts

SCAP Inquiries
scap@nist.gov

Topics

Security and Privacy: configuration management, patch management, security automation, security measurement, vulnerability management

Related Projects

National Checklist Program
Open Security Controls Assessment Language
Security Content Automation Protocol Validation Program
Software Identification Tagging
Testing Laboratories
U.S. Government Configuration Baseline
Created December 07, 2016, Updated May 17, 2018