Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

SCAP Composer: A DITA Open Toolkit Plug-in for Packaging Security Content



Joshua Lubell


The Security Content Automation Protocol (SCAP) schema for source data stream collections standardizes the requirements for packaging Extensible Markup Language (XML) security content into bundles for easy deployment. SCAP bundles must be self-contained such that each bundle contains all necessary information without external references, and reversible such that XML components are unmodified when unbundled and re-bundled into new collections. These requirements (along with the need for very long, globally unique identifiers) make authoring the content and bundling a challenge. SCAP Composer, a software application that uses a Darwin Information Typing Architecture (DITA) specialized element type for source data stream collections, makes the authoring process easier. SCAP Composer takes an incremental approach to aiding SCAP content authors: it helps only with creating source data stream collections; it does not offer any help with creating the XML resources encapsulated in a data stream collection. SCAP Composer is implemented using the DITA Open Toolkit and can be used with any DITA authoring software that includes the Toolkit, or with a standalone Toolkit.
Proceedings Title
Balisage Series on Markup Technologies
Conference Dates
July 30-August 2, 2019
Conference Location
Washington, DC
Conference Title
Balisage: The Markup Conference


DITA, XML, SCAP, Darwin Information Typing Architecture, Extensible Markup Language, Security Content Automation Protocol, cybersecurity, systems integration


Lubell, J. (2019), SCAP Composer: A DITA Open Toolkit Plug-in for Packaging Security Content, Balisage Series on Markup Technologies, Washington, DC, [online], (Accessed May 28, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created August 9, 2019, Updated May 4, 2021