Common Platform Enumeration: Naming Specification Version 2.3

Cheikes, Brant; Waltermire, David; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.IR.7695

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

NIST IR 7695

Common Platform Enumeration: Naming Specification Version 2.3

Documentation Topics

Date Published: August 2011

Author(s)

Brant Cheikes (MITRE), David Waltermire (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

This report defines the Common Platform Enumeration (CPE) Naming version 2.3 specification. The CPE Naming specification is a part of a stack of CPE specifications that support a variety of use cases relating to IT product description and naming. The CPE Naming specification defines the logical structure of names for IT product classes and the procedures for binding and unbinding these names to and from machine-readable encodings. This report also defines and explains the requirements that IT products must meet for conformance with the CPE Naming version 2.3 specification.

Keywords

Common Platform Enumeration; CPE; SCAP; security automation

Control Families

Audit and Accountability; Configuration Management

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7695
Download URL

Supplemental Material:
Press Release (for NISTIRs 7695-7698)

Document History:
08/19/11: IR 7695 (Final)

Topics

Security and Privacy

audit & accountability, security automation

Laws and Regulations

E-Government Act, Federal Information Security Modernization Act