HackDig : Dig high-quality web security articles for hacker

Cybersecurity Firms Partner on Open Source Security Technology Development

2019-10-09 12:00

A group of cybersecurity companies this week announced the Open Cybersecurity Alliance (OCA), a joint effort focused on the development of open source security technologies.

Established with initial open source contribution from IBM Security and McAfee and formed under the OASIS (Organization for the Advancement of Structured Information Standards) international consortium, OCA brings together both organizations and individuals.

The focus of this new initiative is to come up with open source code to freely exchange information, insights, analytics, and orchestrated responses.

On average, organizations today use over 25 security tools from up to 10 vendors, and OCA aims to create the necessary protocols and standards to ensure these tools work together and share information between vendors.

Members of the alliance will work together to develop and promote open source common content, code, tooling, patterns, and practices that will ensure interoperability and data sharing. This should help enterprises improve security visibility, extract more value from existing products, reduce vendor lock-in, and connect data and share insights across products.

“The aim is to simplify the integration of security technologies across the threat lifecycle – from threat hunting and detection, to analytics, operations and response – so that products can work together out of the box,” OCA says.

Initial technology contributions to OCA include STIX-Shifter from IBM Security and OpenDXL Standard Ontology from McAfee. The former aims to create a universal, out-of-the box search capability for security products, while the latter focuses on creating an interoperable cybersecurity messaging format for the OpenDXL messaging bus.

Some of the companies to have already joined the alliance include Advanced Cyber Security Corp, Corsa, CrowdStrike, CyberArk, Cybereason, DFLabs, EclecticIQ, Electric Power Research Institute, Fortinet, Indegy, New Context, ReversingLabs, SafeBreach, Syncurity, ThreatQuotient, and Tufin.

However, the OCA welcomes all organizations and individual contributors, from all around the world.

Related: Sophos Makes Sandboxie Free in Transition to Open Source

Related: FireEye Releases Open Source Persistence Toolkit 'SharPersist'

Related: Cruise Releases Automated Firmware Security Analyzer to Open Source


Source: s-ecruos-nepo-rentrap-smrif-ytirucesrebyc/MhwkN5SJGr5/3~/keewytiruceS/r~/moc.elgoog.yxorpdeef

“Cybersecurity Firms Partner on Open Source Security Technology Development”0 Comments

Submit A Comment

Name:

Email:

Blog :

Verification Code:

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud