![]() |
|||||
|
|
Home > News & Events > Media Relations > News Releases > | |||||||||||||||
MITRE Releases New Security Software FOR IMMEDIATE RELEASE: MITRE Contacts: Karina H. Wright Eryn L. Gallagher Bedford, Massachusetts, McLean, Virginia, December 1, 2008 — The MITRE Corporation has released an alpha version of its new Recommendation Tracker™ (RT) software, an open source program that facilitates development of automated security benchmarks. System administrators use benchmarks—essentially a set of recommendations—to securely configure an operating system or software application and then set up automatic testing to ensure proper configuration. The new edition of RT has features that support the collaborative process of benchmark creation, including taking ordinary textual input and producing output in the standardized XML-based language, XCCDF. Combined, these features make it easier and more efficient to generate and implement benchmarks. RT is available for download on the public website SourceForge.net. "Our goal in sharing this technology is to provide software vendors, security content developers, and business managers with another tool in their security arsenal—one that makes their jobs easier," said Stephen Boczenowski, MITRE project leader and principal information security engineer and scientist. "We also want to impart the expertise we've gained helping our government sponsors develop protections for their data and information." The RT is just the latest tool developed by MITRE in the last 10 years to help the security community produce automated, standardized benchmarks. The not-for-profit organization has developed four of the six security standards which comprise the National Institute of Standards and Technology's Security Content Automation Protocol, or SCAP. The four standards are:
MITRE recently started offering a one-day benchmark development course at its McLean, Va., campus. The course, which includes instruction in RT, OVAL, Windows Investigator Tool, and other information assurance tools and standards, is free and open to practitioners and the public. Online registration for upcoming classes is available at http://www.mitre.org/register2/benchmark/. About MITRE The MITRE Corporation (www.mitre.org) is a not-for-profit national resource that provides systems engineering, research and development, and information technology support to the government. It operates federally funded research and development centers for the Department of Defense, the Federal Aviation Administration, and the Internal Revenue Service and Department of Veterans Affairs, with principal locations in Bedford, Mass., and McLean, Va. Page last updated: December 1, 2008 | Top of page |
Solutions That Make a Difference.® |
|
|