Answers are grounded in this paper and cite their sources.
This paper gives an overview of the existing standards to describe security content. We discuss the challenges security organizations are facing and present approaches for automation of security checks. The OVAL and XCCDF languages are examined in greater detail and an example for their use is given. We describe use cases for these languages and explain the benefits of their deployment.
No takes yet. Share an insight, caveat, or question.
Gerhard Koschorreck (2011) studied this question.