News and Events 2009 (Archive)

October 1, 2009

CEE/Making Security Measurable Booth at IT Security Automation Conference 2009, October 26-29

MITRE is scheduled to host a Making Security Measurable booth at the U.S. National Institute of Standards and Technology’s (NIST) 5th Annual IT Security Automation Conference on October 26-29, 2009 in Baltimore, Maryland, USA.

See the CEE Calendar for information on this and other events.

Making Security Measurable Main Topic of Article in CrossTalk, The Journal of Defense Engineering

An article entitled "Making Security Measurable and Manageable" by CCE Team Member and CWE/CAPEC Program Manager Robert A. Martin was published in the September/October 2009 issue of CrossTalk, The Journal of Defense Engineering.

The article explains how measurable security and automation can be achieved by having government and public efforts address the creation, adoption, operation, and sustainment of their information security infrastructures in a holistic manner and by using common, standardized concepts to define the data (CVE, CCE, CPE, CAPEC, CWE, etc.), communicating this information through standardized languages (OVAL, XCCDF, CEE, etc.), sharing the information in standardized ways (OVAL Repository, NVD, etc.), and adopting tools and services that adhere to these standards.

BACK TO TOP

August 11, 2009

CEE Community Holds Meeting

The CEE Community held a face-to-face meeting on July 31, 2009 Hyatt Place Las Vegas in Las Vegas, Nevada, USA with several members of the CEE community attending. Discussion topics included CCE status update; highlights of the CEE Specification; and, the path forward including the CEE roadmap for 2010-2012, formalizing the CEE Specification, CEE Library implementation, and vendor support. Meeting minutes are available in the Discussion Archives.

CEE Participates in ‘Making Security Measurable’ Booth at Black Hat Briefings 2009

CEE participated in a Making Security Measurable booth at Black Hat Briefings 2009 on July 29-30, 2009 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA.

Booth visitors learned how information security data standards facilitate both effective security process coordination and the use of automation to assess, manage, and improve the security posture of enterprise security information infrastructures. See photos below:

See the CEE Calendar for information on this and other events.

BACK TO TOP

July 20, 2009

UPDATED INFORMATION: CEE Community Meeting on July 31

Updated information is now available for the face-to-face CEE Community meeting currently scheduled for Friday, July 31, 2009 Hyatt Place Las Vegas in Las Vegas, Nevada, USA. The first hour of the meeting will be open to the public, while the second two hours will be a closed CEE Editorial Board meeting. See updated meeting details and agenda below:

Date & Time:

July 31, 2009
Community Meeting: 10:00am - 11:00am Pacific Time
Editorial Board Meeting: 11:00am - 1:00pm Pacific Time

Meeting Room:

Hyatt Place Las Vegas
4520 Paradise Road
Las Vegas, Nevada, USA 89109
702-369-3366

Dial-In Information:

Phone Number: 703-983-6338 in Washington, D.C., USA; 781-271-6338 in Bedford, Massachusetts, USA; or Toll Free 866-648-7367 (866-MITRE-MP). Toll Free number is for North America callers only. Other countries must dial either the Washington or Bedford numbers to attend.

Meeting ID: 233233

AGENDA

1. Introductions
2. CEE Update
   • MITRE Status
   • EMAP: Cooperation with NIST
3. CEE Specification Highlights
   • Dictionary Format
   • Event Taxonomy
   • XML/Plaintext/Binary Syntaxes
4. Path Forward
   • Roadmap for 2010-2012
   • Formalized Specification
   • CEE Library Implementation
   • Vendor Support
5. Open Discussion
6. CEE Editorial Board
   • CEE Specification Discussion

Please contact us at cee@mitre.org with any comments or concerns.

BACK TO TOP

July 10, 2009

CEE Working Group Meeting Scheduled for July 31

A face-to-face CEE Community meeting is currently scheduled for Friday, July 31, 2009 at Hyatt Place Las Vegas in Las Vegas, Nevada, USA. Numerous members of the CEE community will already be present at this location for Black Hat Briefings 2009 and DefCon 17. The main topic of this meeting will be the CEE Architecture Proposal, though other topics will also be discussed.

For those who would like to attend, please contact us at cee@mitre.org.

BACK TO TOP

June 1, 2009

CEE Working Schedule Now Available

The proposed CEE Working Schedule has been posted on the CEE Web site. Activities include: Event Prioritization, Event Taxonomy, Data Dictionary, Syntax and Transport, Use Cases, and Recommendations. Prioritization of the activities is as follows: Firewall, IDS/IPS, and Audit & OS.

In addition, the CEE Architecture Proposal is currently scheduled to be delivered to public at a CEE Community meeting currently scheduled to coincide with Black Hat Briefings 2009 on July 29-30, 2009 in Las Vegas, Nevada, USA. The official date and meeting details will be posted here and on the Calendar pages as soon they become available.

CEE Scheduled to Participate in "Making Security Measurable" Booth at Black Hat Briefings 2009 on July 29-30

CEE is scheduled to participate in a Making Security Measurable booth at Black Hat Briefings 2009 on July 29-30, 2009 at Caesars Palace Las Vegas in Las Vegas, Nevada, USA.

Stop by Booth 70 and learn how information security data standards facilitate both effective security process coordination and the use of automation to assess, manage, and improve the security posture of enterprise security information infrastructures.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

May 7, 2009

MITRE Hosts "Making Security Measurable" Booth at RSA 2009

MITRE hosted a Making Security Measurable booth at RSA 2009 at the Moscone Center in San Francisco, California, USA, on April 20-24, 2009. Booth photos:

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

April 15, 2009

MITRE to Host "Making Security Measurable" Booth at RSA 2009

MITRE is scheduled to host a Making Security Measurable booth at RSA 2009 at the Moscone Center in San Francisco, California, USA, on April 20-24, 2009. Please stop by Booth 2411 and say hello!

Visit the CEE Calendar for information on this and other events.

CEE/Making Security Measurable Briefing Presented at DHS/DoD/NIST SwA Forum

CEE Team Member and CWE Program Manager Robert A. Martin presented a briefing about CEE/Making Security Measurable to the DHS/DoD/NIST SwA Forum on March 10-12, 2009 at MITRE Corporation in McLean, Virginia, USA.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

March 12, 2009

MITRE Hosts "Making Security Measurable" Booth at InfoSec World 2009

MITRE hosted a Making Security Measurable booth at MIS Training Institute’s (MISTI) InfoSec World Conference & Expo 2009 at the Disney Coronado Springs Resort, in Orlando, Florida, USA, on March 9-10, 2009.

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

February 12, 2009

MITRE Hosts "Making Security Measurable" Booth at 2009 Information Assurance Symposium

MITRE hosted a Making Security Measurable booth at the 2009 Information Assurance Symposium at the Sheraton Dallas International Conference and Exposition Center, in Dallas, Texas, USA, on February 3-6, 2009. The symposium is designed to bring together industry, government, and military information assurance professionals with "the latest Information Assurance (IA) products and solutions available to secure voice and data networks."

Visit the CEE Calendar for information on this and other events.

BACK TO TOP

January 8, 2009

MITRE Announces Initial "Making Security Measurable" Calendar of Events for 2009

MITRE has announced its initial Making Security Measurable calendar of events for 2009. Details regarding MITRE’s scheduled participation at these events are noted on the CEE Calendar page. Each listing includes the event name with URL, date of the event, location, and a description of our activity at the event.

• 2009 Information Assurance Symposium, February 3-6, 2009
• InfoSec World Conference & Expo 2009, March 9-10, 2009
• RSA 2009, April 20-24, 2009
• Black Hat Briefings 2009, July 29-30, 2009

Other events may be added throughout the year. Visit the CEE Calendar for information or contact cee@mitre.org to have MITRE present a briefing or participate in a panel discussion about CEE, CVE, CCE, CPE, CAPEC, CWE, CRF, OVAL, and/or Making Security Measurable at your event.

BACK TO TOP