A New SCAP Information and Data Model for Content Authors

Joshua Lubell (1)

1 NIST - National Institute of Standards and Technology [Gaithersburg]

The Security Content Automation Protocol (SCAP) data model for source data stream collections standardizes the packagnt. However, no single data model can satisfy all requirements. The source data stream collection data model does not adequately meet the needs of SCAP content authors, and its implementation-specific syntax lacks the ability to express packaging subtleties critical to software developers and content authors. This chapter defines a new implementation-neutral information model that is easier to understand and does a better job at expressing relationships between objects comprising a source data stream collection. A new authoring data model for facilitating the implementation of SCAP content development software applications is derived from the information model. Also described is an application implementing the authoring data model that enables SCAP content developers to create source data stream collections using a friendly and intuitive syntax, which is then transformed into SCAP-standard-conforming content.

Mots clés: Security Content Automation Protocol; information model; data model

Domaines: Informatique [cs]

Joshua Lubell. A New SCAP Information and Data Model for Content Authors. 12th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2018, Arlington, VA, United States. pp.127-146, ⟨10.1007/978-3-030-04537-1_8⟩. ⟨hal-02076299⟩