Table of Contents

Ch 1. Introduction
Ch 2. What Is SCAP
Ch 3. SCAP Languages
Ch 4. SCAP Enumerations (with case study)
Ch 5. SCAP Vulnerability Measurement (with case study)
Ch 6. Putting the Pieces Together (with case study)
Ch 7. Using SCAP In Your Enterprise (with case study)
Ch 8. Emerging SCAP Technologies
Ch 9. Conclusion
Appendices
Index

About the Author

Greg Witte leads the U.S. Federal civilian customer support team at G2, Inc., a security firm committed to solving the most complex challenges related to the ability of the U.S. to collect, utilize, and defend digital information.

Melanie Cook is an information systems engineer at G2, Inc. She previously worked at the National Security Agency and at the National Institute of Standards and Technology where she contributed to SCAP efforts.

Matt Kerr is G2’s Director of Research and Development. He helped develop the DISA Gold Disk application, the primary compliance assessment utility for Department of Defense systems.

Shane Shaffer is the Technical Director of Security Automation for G2. He served as the lead architect of the Department of Defense’s Vulnerability Management System and has been a key contributor to the development of SCAP.