Everything about Security Content Automation Protocol
Set of security information exchange specifications
The Security Content Automation Protocol (SCAP) is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization, including e.g., FISMA compliance. The National Vulnerability Database (NVD) is the U.S. government content repository for SCAP. An example of an implementation of SCAP is OpenSCAP. SCAP is a suite of tools that have been compiled to be compatible with various protocols for things like configuration management, compliance requirements, software flaws, or vulnerabilities patching. Accumulation of these standards provides a means for data to be communicated between humans and machines efficiently. The objective of the framework is to promote a communal approach to the implementation of automated security mechanisms that are not monopolized. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Security Content Automation ProtocolA 5-minute orientation
- Pick up a classic book: The web application hacker's handbookThe most-reprinted book on the subject
- Read the landmark paper: Managing Security: The Security Content Automation ProtocolCited 24 times
- Go sideways: Federal Information Security Management Act of 2002A closely related topic
- Go sideways: Information Security Automation ProgramA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
📚 Books worth reading
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Introduction to Computing Using PythonLjubomir Perkovic · 2011
Treaty Occupationay ToxicologySuelen Queiroz · 2010- 📕LTE for public safetyRainer Liebhart · 2015
Formal techniques for networked and distributed systemsFORTE 2001 (2001 Cheju-do, Korea) · 2001
Instrument Engineers' HandbookBéla G. Lipták · 2002- 📕Technical Specification for the Security Content Automation Protocolnist · 2014
- 📕Technical Specification for the Security Content Automation Protocolnist · 2014
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Federal Information Security Management Act of 2002 The Federal Information Security Management Act of 2002 (FISMA, 44 U.S.C. § 3541, et seq.) is a United States federal law enacted in 2002 as Title III…
- Information Security Automation Program The Information Security Automation Program (ISAP, pronounced “I Sap”) is a U.S. government multi-agency initiative to enable automation and standardization…
- Mobile device management Mobile device management (MDM) is the administration of mobile devices, such as smartphones, tablet computers, and laptops. MDM is usually implemented…
- National Vulnerability Database The National Vulnerability Database (NVD) is the U.S. government repository of standards-based vulnerability management data represented using the Security…
- Security information and event management Security information and event management (SIEM) is a field within computer security that combines security information management (SIM) and security event…
- SAINT (software) SAINT (Security Administrator's Integrated Network Tool) is computer software used for scanning computer networks for security vulnerabilities, and exploiting…
- File integrity monitoring File integrity monitoring (FIM) is an internal control or process that performs the act of validating the integrity of operating system and application…
- Security engineering Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's…