Clerical Rigor

Category: NIST

  • Trip Report: UW signing-party

    Dear Debian Users, I met last night with a friend from many years ago and a number of students of cryptography. I was disappointed to see the prevalence of black hat, anti-government hackers at the event. I was hoping that civilized humanity had come to agree that using cryptography for deception, harm to others and…

  • NIST::NVD CWE development – follow along

    I’m in the process of getting the tests passing for the 0.03 release of NIST::NVD::Store::SQLite3 wherein our hero imports the CWE data and cross-indexes it with CVEs and CPEs. Follow along and suggest some patches. I’m developing on Debian Wheezy, but I would very much like input from devs on other platforms. http://git.colliertech.org/?p=NIST-NVD-Store-SQLite3.git;a=summary cjac@foxtrot:/tmp$ time…

  • NIST::NVD::Store::SQLite3

    I published an SQLite3 storage back-end to NIST::NVD on the CPAN. It’s pretty quick. About as fast as the DB_File one, but without the down side of being tied to DB_File. It shouldn’t be too difficult to re-factor this code to any DBI-based database. MariaDB anyone? I know it works on Debian. The nightly CPAN…

  • Perl interface to processing / querying NIST’s NVD feed

    For a work project, I wrote a library in perl that can be used to query the NVD feed that NIST publishes here: http://nvd.nist.gov/download.cfm Here’s a snippit from the perldoc: use NIST::NVD::Query; # use convert_nvdcve to generate these files from the XML dumps at # http://nvd.nist.gov/download.cfm my( $path_to_db, $path_to_idx_cpe ) = @ARGV; my $q =…