News and Events

July 24, 2008

Burton Group, Open Group, and Novell Join CEE Effort

Burton Group, Open Group, and Novell have joined the CEE effort to create a single, unified, and industry-adopted log standard. The three organizations joined CEE after a very productive meeting at the "Common Events Standards Special Interest Group (SIG)" at the Burton Group Catalyst Conference North America 2008 in June.

The CEE Team especially recognizes the work done by Novell and Open Group in the creation of the XDAS draft specification for distributed audit services. The XDAS specification, which is free to download on the Open Group Web site, "defines a set of generic events of relevance at a global distributed system level, and a common portable audit record format to facilitate the merging and analysis of audit information from multiple components at the distributed system level. Four groups of APIs are provided to accomplish this."

The experience and knowledge of these three organizations, in both the logging and standardization space, strongly complements that of MITRE and other members of the CEE community.

CEE Working Group Meeting Scheduled for August 8

A face-to-face CEE Working Group meeting is currently scheduled for Friday, August 8, 2008 at the Riviera Hotel & Casino, Las Vegas, Nevada, USA. Numerous members of the CEE community will already be present at this location for Black Hat Briefings 2008 and DefCon 16. Interested attendees should convene at 12 p.m. outside the DefCon registration area at the Riviera Hotel & Casino. For those who would like to attend, but cannot be at the Riviera by noon, please contact us at cee@mitre.org.

CEE Community Teleconference Scheduled for August 29

A CEE Community Teleconference Meeting is currently scheduled for August 29, 2008 from 12 p.m. to 2 p.m., EST. The meeting is open to anyone interested in CEE. The agenda will include a report on recent CEE meetings and activities, including those at the Burton Group CES SIG and at Black Hat Briefings 2008. We would also like to come to agreement on a roadmap and prioritization for creating log specifications and documents.

Phone numbers: 866-648-7367 (North America callers only); 1-703-983-6338 or 781-271-6338 (International)
Meeting ID: 2331

For additional information please contact us at cee@mitre.org.

BACK TO TOP

July 10, 2008

CEE Scheduled to Participate in "Making Security Measurable" Booth at Black Hat Briefings 2008 on August 6-7

CEE is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2008 on August 6-7, 2008 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA.

Visit us at Booth A and learn how information security data standards facilitate both effective security process coordination and the use of automation to assess, manage, and improve the security posture of enterprise security information infrastructures.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

June 26, 2008

CEE Presents Briefing at Burton Group Catalyst Conference North America 2008 on June 24

CEE Team Members William J. Heinbockel (MITRE) and Anton Chuvakin (LogLogic) presented briefings about CEE and the government interest thereof to the "Common Events Standards Special Interest Group (SIG)" at the Burton Group Catalyst Conference North America 2008 on June 24, 2008 at the Best Manchester Grand Hyatt in San Diego, California, USA.

Visit the CEE Calendar for information on this and other events.

MITRE Hosts "Making Security Measurable" Booth at 2008 Cyberspace Symposium on June 16-19

MITRE hosted a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

June 12, 2008

CEE Scheduled to Present Briefing at Burton Group Catalyst Conference North America 2008 on June 24

CEE Technical Lead William J. Heinbockel is scheduled to present a briefing about CEE to the "Common Events Standards Special Interest Group (SIG)" at the Burton Group Catalyst Conference North America 2008 on June 24, 2008 at the Best Manchester Grand Hyatt in San Diego, California, USA.

Visit the CEE Calendar for information on this and other events.

MITRE Scheduled to Host "Making Security Measurable" Booth at 2008 Cyberspace Symposium on June 16-19

MITRE is scheduled to host a Making Security Measurable booth at the 2008 Cyberspace Symposium on June 16-19, 2008 at the Best Westin Royal Plaza Hotel and Trade Center in Marlborough, Massachusetts, USA.

Visit the CEE Calendar for information on this and other events.

MITRE Presents "Making Security Measurable" Briefing at 4th Annual GFIRST Conference on June 2-4

CWE Program Manager Robert A. Martin presented a briefing about Making Security Measurable at the 4th Annual GFIRST Conference on June 2-4, 2008 at the Caribe Royale Hotel in Orlando, Florida, USA.

Visit the CEE Calendar for information on this and other events. Contact cee@mitre.org to have CCE present a briefing or participate in a panel discussion about CCE, CVE, CPE, CWE, CAPEC, CEE, CRF, OVAL, and/or Making Security Measurable at your event.

MITRE Presents "Making Security Measurable" Briefing and Conducts a Half-Day Tutorial at AusCERT 2008 on May 18-23

CWE Program Manager Robert A. Martin and CWE Technical Lead Steven M. Christey presented a briefing about Making Security Measurable and conducted a half-day Making Security Measurable tutorial at AusCERT 2008 on May 18-23, 2008 at the Crowne Plaza Royal Pines Resort in Gold Coast, Australia.

Visit the CEE Calendar for information on this and other events.

MITRE Presents "Making Security Measurable" Briefing at 2008 IEEE Conference on the Technologies for Homeland Security on May 12-13

CWE Program Manager Robert A. Martin presented a briefing about Making Security Measurable to the 2008 IEEE Conference on Technologies for Homeland Security on May 12-13, 2008 at the Westin Hotel in Waltham, Massachusetts, USA.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

May 14, 2008

MITRE Hosts "Making Security Measurable" Booth at RSA 2008, April 7-11

MITRE hosted a Making Security Measurable exhibitor booth at RSA 2008 on April 7-11, 2008 at the Moscone Center in San Francisco, California, USA.

The conference exposed the CEE, CVE, CCE, CPE, CWE, CAPEC, CRF, OVAL, and Making Security Measurable efforts to information security professionals from government and industry. Visit the CEE Calendar for information on this and other events.

BACK TO TOP

April 4, 2008

MITRE to Host "Making Security Measurable" Booth at RSA 2008, April 7-11

MITRE is scheduled to host a Making Security Measurable exhibitor booth at RSA 2008 on April 7-11, 2008 at the Moscone Center in San Francisco, California, USA.

The conference will expose the CEE, CVE, CCE, CME, CPE, CWE, CAPEC, CRF, OVAL, and Making Security Measurable efforts to information security professionals from government and industry. Visit the CEE Calendar for information on this and other events.

MITRE Presents "Making Security Measurable" Briefing at SEPG North America 2008 on March 18

MITRE Principal Engineer Robert A. Martin presented a Making Security Measurable briefing entitled "Architecting Security for Enterprise Process Improvement" at SEPG North America 2008 on March 1, 2008 at the Tampa Convention Center in Tampa, Florida, USA.

Visit the CEE Calendar for information on this and other events. Contact cee@mitre.org to have CCE present a briefing or participate in a panel discussion about CCE, CVE, CPE, CWE, CAPEC, CEE, CRF, OVAL, and/or Making Security Measurable at your event.

BACK TO TOP

March 19, 2008

Common Event Expression (CEE) Introductory White Paper Now Available

The Common Event Expression (CEE) White Paper has been posted on the Documents page in the About section of the CEE Web site. The paper provides a detailed introduction to the CEE initiative including describing the scope of the problem CEE address; explaining how CEE’s Common Log Transport (CLT), Common Log Syntax (CLS), Common Event Expression Taxonomy (CEET), and Common Event Log Recommendations (CELR) will provide the framework for a community consensus in log transportation, log syntax, event representation, and event logging recommendations for various log sources and scenarios; examining the benefits CEE and illustrating them in two use cases; reviewing CEE in comparison to past efforts; and offering a roadmap to creating the CEE Language Specifications.

CEE Briefing Presented at InfoSec World Log Management Summit on March 13

Anton Chuvakin, Chief Logging Evangelist at LogLogic, Inc. presented a briefing about CCE entitled "Emerging Log Standards" at Infosec World Log Management Summit on March 13, 2008 at the Rosen Shingle Creek Resort in Orlando, Florida, USA.

Visit the CEE Calendar for information on this and other events.

MITRE Hosts "Making Security Measurable" Booth at InfoSec World 2008, March 10-11

MITRE hosted a Making Security Measurable exhibitor booth at InfoSec World Conference & Expo 2008 on March 10-11, 2008 at the Rosen Shingle Creek Resort in Orlando, Florida, USA.

The conference exposed the CEE, CVE, CCE, CME, CPE, CWE, CAPEC, CRF, OVAL, and Making Security Measurable efforts to information security professionals from government and industry. Visit the CEE Calendar for information on this and other events.

BACK TO TOP

February 1, 2008

MITRE Hosts "Making Security Measurable" Booth at 2008 Information Assurance Workshop, January 28 - February 1

MITRE hosted a Making Security Measurable exhibitor booth at the 2008 Information Assurance Workshop on January 28 - February 1, 2008 at the Philadelphia Marriott Downtown in Philadelphia, Pennsylvania, USA. The conference exposed the CEE, CVE, CCE, CME, CPE, CWE, CAPEC, CRF, OVAL, and Making Security Measurable efforts to information security professionals from government and industry.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

December 7, 2007

Common Event Expression (CEE) Launches New Web Site

This new Common Event Expression (CEE) Web site includes a CEE Language section with information to assist the community in developing the CEE Event Taxonomy, CEE Log Syntax Specification, CEE Log Transport Specification, and CEE Log Recommendations documents; an About section describing the overall CEE effort in more detail; News and Calendar pages; and a Community section with a CEE Working Group page, and a CEE Discussion List sign-up page.

BACK TO TOP

July 31, 2007

CEE Included in Booth at Black Hat Briefings 2007, August 1-2

MITRE hosted a Making Security Measurable exhibitor booth that included information about CEE at Black Hat Briefings 2007 on August 1-2, 2007 at Caesars Palace in Las Vegas, Nevada, USA. The conference exposed MITRE’s CCE, CVE, CCE, CME, CPE, CWE, OVAL, and Making Security Measurable efforts to a diverse audience of information security-focused attendees from around the world.

Visit the CEE Calendar page for information on upcoming events.

CEE Included in Briefing at 19th Annual System and Software Technology Conference on June 20

CEE was included as a topic in a briefing entitled "Creating a Secure Architecture as a Basis for Compliance" by MITRE Principal Engineer Robert A. Martin at the 19th Annual System and Software Technology Conference on June 20, 2007 at the Tampa Convention Center in Tampa, Florida, USA. The briefing exposed MITRE’s CEE, CVE, CCE, CME, CPE, CWE, OVAL, and Making Security Measurable efforts to a diverse audience of information security professionals from industry and the U.S. government and military.

Visit the CEE Calendar page for information on upcoming events.

BACK TO TOP