On 07/16/2014 11:58 PM, Kordell, Luke T wrote:
Hi Simon,
Thank you for helping me with this!
How does the default model score results? With my output of 192 passes and 2
unknowns there is a 3.21% different, a deficit that 2 unknowns cannot make-up. I tried
changing the model to flat and this definitely helped things by bringing my pass
percentage up to 98.97. In this case the 2 unknowns are clearly why I'm not at 100%.
When using the default model are passes, fails, and unknowns weighted differently? I'm
going to include the scan I've just run which has both the flat and default model for
your refference. As always thank you for taking the time to explain.
Hello Luke,
The default model takes Rule's weight into account. The flat model does not.
The scoring models are in detail described in XCCDF standard (NIST
Interagency Report 7275 Revision 4).
Best regards,
--
Simon Lukasik
Security Technologies, Red Hat, Inc.