Making security measurable and manageable

CrossTalk

Volumn 22, Issue 9-10, 2009, Pages 26-32

  Martin, Robert A ^a  

^a MITRE CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CRITICAL ISSUES; EXCHANGE FORMAT;

KNOWLEDGE MANAGEMENT; KNOWLEDGE REPRESENTATION;

REGULATORY COMPLIANCE;

EID: 69949129046     PISSN: None     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (14)

1. Chestnut, Harold. Systems Engineering Tools. New York: John Wiley & Sons, 1965.
2. Martin, Robert A. "Transformational Vulnerability Management Through Standards." CROSSTALK May 2005 www.stsc.hill.af.mil/crosstalk/2005/05/ 0505Martin.html.
3. Goodman, Seymour E., and Herbert S. Lin. Toward a Safer and More Secure Cyberspace. Washington, D.C.: National Academies Press, 2007.
4. "Common Vulnerabilities and Exposures." The MITRE Corporation.25 July 2009 http://cve.mitre.org.
5. Ziring, Neal, and Stephen D. Quinn. "The Specification for the Extensible Configuration Checklist Description Format Vers. 1.1.4." National Institute of Standards and Technology. Jan. 2008 http://csrc.nist.gov/ publications/nistir/ir7275r3/NISTIR-7275r3.pdf.
6. "The Open Vulnerability and Assessment Language." The MITRE Corporation. 25 July 2009 http://oval.mitre.org.
7. Evans, Karen S. "Ensuring New Acquisitions Include Common Security Configurations." Memorandum for Chief Information Officers and Chief Acquisition Officers. 1 June 2007 www.whitehouse.gov/omb/memoranda/fy2007/m07- 18.pdf.
8. "The Federal Desktop Core Configuration - FDCC." NIST http://nvd.nist.gov/fdcc.
9. "Common Platform Enumeration." The MITRE Corporation. 25 July 2009 http://cpe.mitre.org.
10. "Common Configuration Enumeration." The MITRE Corporation. 25 July 2009 http://cce.mitre.org.
11. "Common Weakness Enumeration." The MITRE Corporation. 25 July 2009 http://cwe.mitre.org.
12. "Common Attack Pattern Enumeration and Classification." The MITRECorporation. 25 July 2009 http://capec.mitre.org.
13. "Twenty Critical Controls for Effective Cyber Defense: Consensus Audit Guidelines." SANS Institute. 9 May 2009 www.sans.org/cag/print.php.
14. "Commission on Cybersecurity for the 44th Presidency." Center for Strategic and International Studies Corporation. 2009 www.csis.org/tech/ cyber.