Abstract

Cybersecurity has become increasingly important in recent years. Many organizations such as large enterprises, governments, hospitals, the military, and airports use computers to communicate, process data, serve customers, etc. These computers may contain sensitive data or be part of a company's critical infrastructure. Protecting and securing these machines is becoming an increasingly important issue for many companies.

One approach to securing the system is an automated security audit (according to the organization's security policy). These security policies define, through a set of rules and recommendations, what a secure system should look like for specific use cases. Security-Content-Automation-Protocol (SCAP) is used to check whether the system complies with the policy.

There are ideas on how to use machine learning to improve user-friendliness and simplify the work of developers.

Slides

Lecture Recordings

Readings

1. https://csrc.nist.gov/projects/Security-Content-Automation-Protocol
2. https://ovalproject.github.io/getting-started/tutorial/
   

Catering

Camembert.