[SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?

Josh Wisenbaker dubs at apple.com
Fri May 31 12:57:48 PDT 2013


Hey Danny,

No, Shawn owns this on the Apple side. I have jumped in to help though based on the needs of customers both inside and out of the gov space.

Josh

-- 
Josh Wisenbaker
Consulting Engineer - Apple U.S. Commercial and Governmental Sales
dubs at apple.com

On May 31, 2013, at 2:59 PM, "Haynes, Dan" <dhaynes at mitre.org> wrote:

> Hi Josh,
>  
> Thanks, for the introduction!  Does that mean you will be supporting the SCAP-on-Apple project on the Apple side of things?
>  
> As for me, I work on the OVAL project at MITRE and will try to help and coordinate this effort from the OVAL side of things (e.g. introducing new tests in OVAL, OVAL content best practices, etc.).
>  
> Thanks,
> 
> Danny
>  
> From: Josh Wisenbaker [mailto:dubs at apple.com] 
> Sent: Friday, May 31, 2013 1:46 PM
> To: Haynes, Dan
> Cc: OVAL; scap-on-apple-dev at lists.macosforge.org
> Subject: Re: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
>  
> Hi Danny,
>  
> I suppose a bit of an introduction from myself would help here.
>  
> I'm Josh Wisenbaker and I'm a peer of Shawn's at Apple on the CE team. I cover the client management and deployment subject matter and do a bit of Mac App Dev coverage as well.
>  
> So while I'm not a contractor, I have done plenty of work over the years with gov and mil accounts.
>  
> Josh
>  
> -- 
> Josh Wisenbaker
> Consulting Engineer - Apple U.S. Commercial and Governmental Sales
> dubs at apple.com
>  
> On May 31, 2013, at 12:30 PM, "Haynes, Dan" <dhaynes at mitre.org> wrote:
> 
> 
> Hi Josh,
> 
> I guess I forgot to ask, are you supporting the U.S. government as a contractor?
> 
> Thanks,
> 
> Danny
>  
>  
> From: Haynes, Dan 
> Sent: Friday, May 31, 2013 12:03 PM
> To: 'Josh Wisenbaker'; scap-on-apple-dev at lists.macosforge.org
> Subject: RE: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
>  
> Hi Josh,
>  
> The SPAWAR SCC tool is limited to U.S. government agencies and supporting contractors.  I will put you in touch with the SPAWAR team to see if you are eligible.
>  
> If not, there are quite a few other tools available (some commercial and some open source).  You can find them at the following links.
>  
> http://nvd.nist.gov/scapproducts.cfm
>  
> http://oval.mitre.org/adoption/productlist.html
>  
> Thanks,
> 
> Danny
>  
> From: scap-on-apple-dev-bounces at lists.macosforge.org [mailto:scap-on-apple-dev-bounces at lists.macosforge.org] On Behalf Of Josh Wisenbaker
> Sent: Friday, May 31, 2013 11:52 AM
> To: scap-on-apple-dev at lists.macosforge.org
> Subject: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
>  
> Does anyone have access to the SCC 3.1 that is posted on the DISA page here? <http://iase.disa.mil/stigs/scap/index.html>
>  
> From the screenshots I've seen it looks like a Java tool.
>  
> Josh
>  
> -- 
> Josh Wisenbaker
> Consulting Engineer - Apple U.S. Commercial and Governmental Sales
> dubs at apple.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/scap-on-apple-dev/attachments/20130531/4fc2b760/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3624 bytes
Desc: not available
URL: <http://lists.macosforge.org/pipermail/scap-on-apple-dev/attachments/20130531/4fc2b760/attachment-0001.p7s>


More information about the SCAP-On-Apple-Dev mailing list