BF Validate-Verify API
Irena Bojanova, Inventor/Creator, PI & Lead, NIST Bugs Framework (BF), 2014 – ~~~ #

The BF Validate-Verify API provides access to the BF Parser, which validates and verifies BF Vulnerability Specifications in .bfv, .bfvul, and .bff formats. It is also incorporated in the BF GUI Tool.

• BF Parser APP → Key required:

  https://samate.nist.gov/services/BF/BFVulnerability.xml/BFValidateVerify?key=<code>YOUR_KEY</code>
  

• BF Parser API Programatically → Key required:
  

  C# - simplified

  HttpClient client = new HttpClient() { BaseAddress = new Uri("https://samate.nist.gov/services/BF") };
  
  //replace YOUR_USER_NAME and YOUR_KEY
  client.DefaultRequestHeaders.Add("user", YOUR_USER_NAME);
  client.DefaultRequestHeaders.Add("key", YOUR_KEY);
  
  var files = new MultipartFormDataContent();
  // loop over your .bfv files --> fileName
      var fileStream = File.OpenRead(fileName);
      var file = new StreamContent(fileStream);
      files.Add(file, "files", Path.GetFileName(fileStream.Name));      
  
  var response = await BFClient.SendRequest("BFVulnerability/BFValidateVerify/api", HttpMethod.Post, files);
  response.EnsureSuccessStatusCode();
  var result = await response.Content.ReadAsStringAsync();
  

  Python

  //to be added//

BF CITATION:
Bojanova I (2024) Bugs Framework (BF): Formalizing Cybersecurity Weaknesses and Vulnerabilities. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP), NIST SP 800-231. https://doi.org/10.6028/NIST.SP.800-231