+1 coinfor reading to the end
+1
Home / Glossary / OVAL
Glossary · Security

OVAL

Open Vulnerability Assessment Language

In plain language

A standard way of writing down how to test a computer for a specific weakness, so different tools can run the same checks.

The metaphor

Like a standard checklist format that every inspector can read the same way.

Going deeper

How it works

  • Each check describes what to look for and what counts as a problem.
  • Scanners can share and reuse the checks.
  • It is mostly used by security tools and auditors.
  • Newer standards cover similar ground.
In practice
  • A scanner imports a check for a known weakness.
  • An auditor runs the same checks on every computer.
  • A security team shares a check with another team.

A question owners ask

Do I need to use it?

No. It is something your security tools may use in the background.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →