<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<base href="x-msg://9/"><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
span.apple-tab-span
        {mso-style-name:apple-tab-span;}
span.apple-converted-space
        {mso-style-name:apple-converted-space;}
span.apple-style-span
        {mso-style-name:apple-style-span;}
span.EmailStyle21
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.icon3
        {mso-style-name:icon3;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">Hi Peter,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><br>
Great question! <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">As a little background for those who may not have seen the announcement go by, Shawn
 Geddis of Apple recently launched the SCAP-On-Apple project on MacOSForge (<a href="http://scap-on-apple.macosforge.org/"><span style="color:#00007F;mso-style-textfill-fill-color:#00007F;mso-style-textfill-fill-alpha:100.0%">http://scap-on-apple.macosforge.org/</span></a>)
 which is a community driven project with the following mission.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">“The
<strong><span style="font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;font-weight:normal">SCAP-On-Apple</span></strong> Open Source Project engages and empowers the
<strong><span style="font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;font-weight:normal">SCAP</span></strong> community to strengthen the awareness, knowledge and collaboration on
<strong><span style="font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;font-weight:normal">SCAP</span></strong><b>
</b>Content, Tools and Solutions with authoritative data for the Apple Platforms (<span class="icon3">​</span>OSX and
<span class="icon3">​</span>iOS).”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">The SCAP-On-Apple project is meant to be a collaborative place for those interested
 in having SCAP support for Apple products and is meant to complement existing efforts.&nbsp; As you mentioned, I don’t think there are any explicit ground rules so I will give my thoughts on how I see the project fitting in from an OVAL perspective.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">From an OVAL perspective, the major benefit will be the authoritative information
 and reach back into Apple that Shawn Geddis will provide as well as the domain expertise and experience from members of the community who are focused on supporting Apple products.&nbsp; This is very helpful because we (the OVAL team at MITRE) are not domain experts
 in all platforms (and cannot be from a resources perspective) and we will be actively looking to the SCAP-On-Apple community help drive support for Apple products in OVAL.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">With regards to content development, I think a lot of the discussion (e.g. what settings
 to check in a security guide, how to check for vulnerabilities, etc.), development, and review would occur on the SCAP-On-Apple mailing lists.&nbsp; When complete, the SCAP-On-Apple project could then host that content on the project site and make it available
 to the community.&nbsp; Or, the project could decide that they want to have an existing repository to host the content. &nbsp;Both are valid approaches, however, this is a decision that the SCAP-On-Apple project will have to make.&nbsp; Although from the Contribute page
 on the wiki (<a href="http://scap-on-apple.macosforge.org/trac/wiki/contribute/"><span style="color:#00007F;mso-style-textfill-fill-color:#00007F;mso-style-textfill-fill-alpha:100.0%">http://scap-on-apple.macosforge.org/trac/wiki/contribute/</span></a>), it
 sounds like the project will be maintaining a repository of content specific to Apple products.&nbsp;
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">As far as the OVAL Language is concerned, I could see the SCAP-On-Apple project as
 being the incubator for discussing and developing new features needed to fully check Apple platforms with OVAL.&nbsp; The SCAP-On-Apple project should feel free to use the OVAL Language Sandbox (<a href="http://oval.mitre.org/language/sandbox.html"><span style="color:#00007F;mso-style-textfill-fill-color:#00007F;mso-style-textfill-fill-alpha:100.0%">http://oval.mitre.org/language/sandbox.html</span></a>)
 if they would like to implement schema changes.&nbsp; Once developed, the SCAP-On-Apple project could submit these features to the broader OVAL community (oval-developer-list) for review, discussion, and integration into an official release of OVAL. &nbsp;I also see
 it as the go to place when there are questions related to Apple platforms.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">Lastly, for tools, it will be a good place to ask questions about how to best implement
 features as it pertains to Apple products and provide a central location to share code and utilities with other members of the community who are interested in supporting Apple products.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">Anyways, those are my thoughts on how it would fit in.&nbsp; It would be great to hear
 what others think.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#254061;mso-style-textfill-fill-color:#254061;mso-style-textfill-fill-alpha:100.0%">Thanks,<br>
<br>
Danny<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Link, Peter R. [mailto:link1@llnl.gov]
<br>
<b>Sent:</b> Tuesday, November 06, 2012 9:16 AM<br>
<b>To:</b> Haynes, Dan<br>
<b>Subject:</b> Re: [OVAL-DEVELOPER-LIST] OVAL 5.11 Release Goals and Timeline<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Danny, <o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal">How are you going to integrate OVAL work on OSX/iOS with Apple's SCAP-on-Apple project? I haven't seen any information on what the ground rules are.<span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:4.8pt"><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class="MsoNormal">On Nov 5, 2012, at 12:50 PM, &quot;Haynes, Dan&quot; &lt;<a href="mailto:dhaynes@MITRE.ORG">dhaynes@MITRE.ORG</a>&gt; wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">During the 2012 4<sup>th</sup><span class="apple-converted-space">&nbsp;</span>Quarter OVAL Board Meeting and the weeks following, we worked with the OVAL Board to develop goals and
 a timeline for the OVAL 5.11 release.&nbsp; Meeting minutes can be found here (<a href="http://oval.mitre.org/community/archives/boardminutes/20121015.pdf"><span style="color:purple">http://oval.mitre.org/community/archives/boardminutes/20121015.pdf</span></a>).&nbsp;
 The goals were developed based on what we have been hearing from the community.&nbsp;<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">3.<span style="font-size:7.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span>Improve Apple support such that the Apple Security Guides and DISA STIGs are fully automatable for OSX and iOS<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:13.5pt">4.</span><span style="font-size:7.0pt">&nbsp; &nbsp; &nbsp;</span><span style="font-size:13.5pt"><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:13.5pt"><span style="font-size:13.5pt;color:black">Peter Link<br>
Cyber Security Analyst<br>
Cyber Security Program<br>
Lawrence Livermore National Laboratory<br>
PO Box 808, L-315<br>
Livermore, CA 94551-0808<br>
<a href="mailto:link1@llnl.gov">link1@llnl.gov</a><br>
<br>
<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</div>
</body>
</html>