Open Vulnerability and Assessment Language

<h2 id="oval-language">OVAL Language</h2>
<p>The <a href="http://oval.mitre.org/language/index.html">OVAL Language</a> standardizes the three main steps of the assessment process: representing configuration information of systems for testing; analyzing the system for the presence of the specified machine state (vulnerability, configuration, patch state, etc.); and reporting the results of this assessment.
</p>
<h2 id="oval-interpreter">OVAL Interpreter</h2>
<p>The <a href="http://oval.mitre.org/language/download/interpreter/index.html">OVAL Interpreter</a> is a freely available reference implementation created to show how data can be collected from a computer for testing based on a set of OVAL Definitions and then evaluated to determine the results of each definition.
</p><p>The OVAL Interpreter demonstrates the usability of OVAL Definitions, and can be used by definition writers to ensure correct syntax and adherence to the OVAL Language during the development of draft definitions. It is not a fully functional scanning tool and has a simplistic user interface, but running the OVAL Interpreter will provide you with a list of result values for each evaluated definition.
</p>
<h2 id="oval-repository">OVAL Repository</h2>
<p>The <a href="http://oval.mitre.org/repository/index.html">OVAL Repository</a> is the central meeting place for the OVAL Community to discuss, analyze, store, and disseminate OVAL Definitions. Other repositories in the community also host OVAL content, which can include OVAL System Characteristics files and OVAL Results files as well as definitions. The OVAL Repository contains all community-developed OVAL Vulnerability, Compliance, Inventory, and Patch Definitions for supported operating systems. Definitions are free to use and implement in information security products and services. 
The OVAL Repository Top Contributor Award Program grants awards on a quarterly basis to the top contributors to the OVAL Repository. The Repository is a community effort, and contributions of new content and modifications are instrumental in its success. The awards serve as public recognition of an organization’s support of the OVAL Repository and as an incentive to others to contribute.
</p><p>Organizations receiving the award will also receive an <a href="http://oval.mitre.org/repository/awards.html">OVAL Repository Top Contributor</a> logo indicating the quarter of the award (e.g., 1st Quarter 2007) that may be used as they see fit. Awards are granted to organizations that have made a significant contribution of new or modified content each quarter.
</p>
<h2 id="oval-board">OVAL Board</h2>
<p>The OVAL Board is an advisory body, which provides valuable input on OVAL to the Moderator (currently MITRE). While it is important to have organizational support for OVAL, it is the individuals who sit on the OVAL Board and their input and activity that truly make a difference. The Board’s primary responsibilities are to work with the Moderator and the Community to define OVAL, to provide input into OVAL’s strategic direction, and to advocate OVAL in the Community.
</p>
<h2 id="see-also">See also</h2>
<ul><li><a href="/facts/MITRE/lmFLYepE">MITRE</a> The MITRE Corporation</li>
<li><a href="/facts/Common_Vulnerabilities_and_Exposures/r6uEABNB">Common Vulnerability and Exposures</a> (index of standardized names for vulnerabilities and other security issues)</li>
<li><a href="/facts/XCCDF/meDMMghq">XCCDF</a> - eXtensible Configuration Checklist Description Format</li>
<li><a href="/facts/Security_Content_Automation_Protocol/MKslIMe4">Security Content Automation Protocol</a> uses OVAL</li></ul>
<h2 id="external-links">External links</h2>
<ul><li><a href="https://oval.cisecurity.org/">OVAL web site</a></li>
<li><a href="http://www.gideontechnologies.com/">Gideon Technologies (OVAL Board Member) Corporate Web Site</a></li>
<li><a href="http://www.itsecdb.com/">www.itsecdb.com</a> Portal for OVAL definitions from several sources</li>
<li><a href="http://oval.secpod.com">oval.secpod.com</a> SecPod OVAL Definitions Professional Feed</li></ul>

Open Vulnerability and Assessment Language open-in-new

Open Vulnerability and Assessment Language