60-day Public Review for Classification of Everyday Living Version 1.0 COS01 – ends 08 January 2019

Members of the OASIS Classification of Everyday Living (COEL) TC [1] have recently approved a Special Majority Ballot [2] to advance Classification of Everyday Living Version 1.0 as a Candidate OASIS Standard (COS). The COS now enters a 60-day public review period in preparation for a member ballot to consider its approval as an OASIS Standard.

Classification of Everyday Living Version 1.0
Candidate OASIS Standard 01
18 October 2018

Specification Overview:

The OASIS COEL specification provides a privacy-by-design framework for the collection and processing of behavioural data. It is uniquely suited to the transparent use of dynamic data for personalised digital services, IoT applications where devices are collecting information about identifiable individuals and the coding of behavioural data in identity solutions. The specification pseudonymises personal data at source and maintains a separation of different data types with clearly defined roles & responsibilities for all actors. All behavioural data are defined as event-based packets. Every packet is connected directly to an individual and can contain a summary of the consent they provided for the processing of the data. A combination of a taxonomy of all human behaviours (the COEL model) and the event-based protocol provide a universal template for data portability. Simple interface specifications enforce the separation of roles and provide system-level interoperability.

The TC received 5 Statements of Use from Activinsights, Coelition, Fujitsu, OpenConsent, and University of Exeter [3].

Public Review Period:

The 60-day public review starts 10 November 2018 at 00:00 UTC and ends 08 January 2019 at 23:59 UTC.

This is an open invitation to comment. OASIS solicits feedback from potential users, developers and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

The prose specification document and related files are available here:

Editable source (Authoritative):
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/COEL-v1.0-cos01.docx
HTML:
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/COEL-v1.0-cos01.html
PDF:
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/COEL-v1.0-cos01.pdf
COEL model v1.0:
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/model/coel.json
Schemas for Behavioural Atom Specification and Public Query Interface (PQI):
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/schemas/
ZIP distribution file (complete):
http://docs.oasis-open.org/coel/COEL/v1.0/cos01/COEL-v1.0-cos01.zip

Additional information about the specification and the COEL TC may be found at the TC’s public home page:
https://www.oasis-open.org/committees/coel/

Comments may be submitted to the TC by any person through the use of the OASIS TC Comment Facility as explained in the instructions located via the button labeled “Send A Comment” at the top of the TC public home page, or directly at:
https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=coel

Comments submitted by TC non-members for this work and for other work of this TC are publicly archived and can be viewed at:
http://lists.oasis-open.org/archives/coel-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review of Classification of Everyday Living Version 1.0, we call your attention to the OASIS IPR Policy [4] applicable especially [5] to the work of this technical committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

==============

[1] OASIS Classification of Everyday Living (COEL) TC
https://www.oasis-open.org/committees/coel/

[2] http://www.oasis-open.org/who/intellectualproperty.php

[3] Statements of Use:
Coelition: https://www.oasis-open.org/apps/org/workgroup/coel/email/archives/201808/msg00002.html
Activinsights: https://www.oasis-open.org/apps/org/workgroup/coel/email/archives/201807/msg00008.html
Fujitsu: https://www.oasis-open.org/apps/org/workgroup/coel/email/archives/201808/msg00010.html
University of Exeter: https://www.oasis-open.org/apps/org/workgroup/coel/email/archives/201808/msg00004.html
OpenConsent: https://www.oasis-open.org/apps/org/workgroup/coel/email/archives/201808/msg00003.html

[4] http://www.oasis-open.org/policies-guidelines/ipr

[5] http://www.oasis-open.org/committees/coel/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-RAND-Mode
RF on RAND Mode

Invitation to Comment on three Open Command and Control (OpenC2) Specifications – ends December 10th

OASIS and the Open Command and Control (OpenC2) TC are pleased to announce that the first three specifications in the OpenC2 suite are now available for public review and comment:
– Open Command and Control (OpenC2) Language Specification Version 1.0
– Open Command and Control (OpenC2) Profile for Stateless Packet Filtering Version 1.0
– Specification for Transfer of OpenC2 Messages via HTTPS Version 1.0

OpenC2 is a suite of specifications to achieve command and control of cyber defense functions. These specifications include the OpenC2 Language Specification, Actuator Profiles, and Transfer Specifications. The OpenC2 Language Specification and Actuator Profile(s) focus on the standard at the producer and consumer of the command and response while the transfer specifications focus on the protocols for their exchange.

– The OpenC2 Language Specification provides the semantics for the essential elements of the language, the structure for commands and responses, and the schema that defines the proper syntax for the language elements that represents the command or response.
– OpenC2 Actuator Profiles specify the subset of the OpenC2 language relevant in the context of specific actuator functions. Cyber defense components may implement multiple actuator profiles. Actuator profiles extend the language by defining specifiers that identify the actuator to the required level of precision and may define command arguments for those actuator functions. “OpenC2 Profile for Stateless Packet Filtering” is the first OpenC2 Actuator Profile.
– OpenC2 Transfer Specifications utilize existing protocols and standards to implement OpenC2 in specific environments. These standards are used for communications and security functions beyond the scope of the OpenC2 language, such as message transfer encoding, authentication, and end-to-end transport of OpenC2 messages. “Transfer of OpenC2 Messages via HTTPS” is the first OpenC2 Transfer Specification.

Each specification would best be reviewed in the context of the overall suite of companion specifications.

The documents and related files are available here:

Open Command and Control (OpenC2) Language Specification Version 1.0
Committee Specification Draft 07 / Public Review Draft 01
17 October 2018

Editable source in Markdown (Authoritative):
http://docs.oasis-open.org/openc2/oc2ls/v1.0/csprd01/oc2ls-v1.0-csprd01.md
HTML:
http://docs.oasis-open.org/openc2/oc2ls/v1.0/csprd01/oc2ls-v1.0-csprd01.html
PDF:
http://docs.oasis-open.org/openc2/oc2ls/v1.0/csprd01/oc2ls-v1.0-csprd01.pdf
JSON Schemas:
http://docs.oasis-open.org/openc2/oc2ls/v1.0/csprd01/schemas/
Complete ZIP package of specification documents and related files:
http://docs.oasis-open.org/openc2/oc2ls/v1.0/csprd01/oc2ls-v1.0-csprd01.zip
******

Open Command and Control (OpenC2) Profile for Stateless Packet Filtering Version 1.0
Committee Specification Draft 04 / Public Review Draft 01
17 October 2018

Editable source in Markdown (Authoritative):
http://docs.oasis-open.org/openc2/oc2slpf/v1.0/csprd01/oc2slpf-v1.0-csprd01.md
HTML:
http://docs.oasis-open.org/openc2/oc2slpf/v1.0/csprd01/oc2slpf-v1.0-csprd01.html
PDF:
http://docs.oasis-open.org/openc2/oc2slpf/v1.0/csprd01/oc2slpf-v1.0-csprd01.pdf
JSON schemas:
http://docs.oasis-open.org/openc2/oc2slpf/v1.0/csprd01/schemas/
Complete ZIP package of specification documents and related files:
http://docs.oasis-open.org/openc2/oc2slpf/v1.0/csprd01/oc2slpf-v1.0-csprd01.zip
******

Specification for Transfer of OpenC2 Messages via HTTPS Version 1.0
Committee Specification Draft 03 / Public Review Draft 01
17 October 2018

Editable source in Markdown (Authoritative):
http://docs.oasis-open.org/openc2/open-impl-https/v1.0/csprd01/open-impl-https-v1.0-csprd01.md
HTML:
http://docs.oasis-open.org/openc2/open-impl-https/v1.0/csprd01/open-impl-https-v1.0-csprd01.html
PDF:
http://docs.oasis-open.org/openc2/open-impl-https/v1.0/csprd01/open-impl-https-v1.0-csprd01.pdf
Complete ZIP package of specification documents and any related files:
http://docs.oasis-open.org/openc2/open-impl-https/v1.0/csprd01/open-impl-https-v1.0-csprd01.zip

How to Provide Feedback

The TC requests reviewers reference their comments to the page and nearest line numbers in the PDF versions.

OASIS and the OpenC2 TC value your feedback. We solicit input from developers, users and others, whether OASIS members or not, for the sake of improving the interoperability and quality of our technical work.

The public reviews start 10 November at 00:00 UTC and ends 10 December at 23:59 UTC.

Comments may be submitted to the TC by any person through the use of the OASIS TC Comment Facility which can be used by following the instructions on the TC’s “Send A Comment” page (https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=openc2).

The TC requests that reviewers reference their comments to the page and nearest line numbers in the PDF versions.

Comments submitted by TC non-members for this work and for other work of this TC are publicly archived and can be viewed at:
https://lists.oasis-open.org/archives/openc2-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review, we call your attention to the OASIS IPR Policy [1] applicable especially [2] to the work of this Technical Committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about the specifications and the OpenC2 TC can be found at the TC’s public home page:
https://www.oasis-open.org/committees/openc2/

========== Additional references:

[1] http://www.oasis-open.org/who/intellectualproperty.php

[2] http://www.oasis-open.org/committees/openc2/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#Non-Assertion-Mode
Non-Assertion Mode

60-day Public Review for #TOSCA Simple Profile in YAML V1.2 COS01 – ends Dec. 24th

Members of the OASIS Topology and Orchestration Specification for Cloud Applications (TOSCA) TC [1] have recently approved a Special Majority Ballot [2] to advance TOSCA Simple Profile in YAML Version 1.2 as a Candidate OASIS Standard (COS). The COS now enters a 60-day public review period in preparation for a member ballot to consider its approval as an OASIS Standard.

YAML is a human friendly data serialization standard with a syntax much easier to read and edit than XML. The TOSCA Simple Profile in YAML specifies a rendering of TOSCA which aims to provide a more accessible syntax as well as a more concise and incremental expressiveness of the TOSCA DSL (Domain Specific Language) in order to minimize the learning curve and speed the adoption of the use of TOSCA to portably describe cloud applications.

The TC received 3 Statements of Use from XLAB, AT&T, and Ubicity Corp. [3].

You can find the prose specification and related files here:

TOSCA Simple Profile in YAML Version 1.2
Candidate OASIS Standard 01
10 October 2018

PDF (Authoritative):
http://docs.oasis-open.org/tosca/TOSCA-Simple-Profile-YAML/v1.2/cos01/TOSCA-Simple-Profile-YAML-v1.2-cos01.pdf

HTML:
http://docs.oasis-open.org/tosca/TOSCA-Simple-Profile-YAML/v1.2/cos01/TOSCA-Simple-Profile-YAML-v1.2-cos01.html

Editable source:
http://docs.oasis-open.org/tosca/TOSCA-Simple-Profile-YAML/v1.2/cos01/TOSCA-Simple-Profile-YAML-v1.2-cos01.docx

For your convenience, OASIS provides a complete package of the prose specification and related files in a ZIP distribution file. You can download the ZIP file here:

http://docs.oasis-open.org/tosca/TOSCA-Simple-Profile-YAML/v1.2/cos01/TOSCA-Simple-Profile-YAML-v1.2-cos01.zip

Public Review Period:

The 60-day public review starts 26 October 2018 at 00:00 UTC and ends 24 December 2018 at 23:59 UTC.

This is an open invitation to comment. OASIS solicits feedback from potential users, developers and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

Comments may be submitted to the TC by any person through the use of the OASIS TC Comment Facility as explained in the instructions located via the button labeled “Send A Comment” at the top of the TC public home page, or directly at:

https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=tosca

Comments submitted by TC non-members for this work and for other work of this TC are publicly archived and can be viewed at:

http://lists.oasis-open.org/archives/tosca-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review of “TOSCA Simple Profile in YAML Version 1.2” we call your attention to the OASIS IPR Policy [4] applicable especially [5] to the work of this technical committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about the specification and the TOSCA TC may be found at the TC’s public home page:

https://www.oasis-open.org/committees/tosca/

==============

[1] OASIS Topology and Orchestration Specification for Cloud Applications (TOSCA) TC
https://www.oasis-open.org/committees/tosca/

[2] https://www.oasis-open.org/apps/org/workgroup/tosca/ballot.php?id=3260

[3] Statements of Use:

XLAB: https://www.oasis-open.org/apps/org/workgroup/tosca/email/archives/201809/msg00014.html

AT&T: https://www.oasis-open.org/apps/org/workgroup/tosca/email/archives/201808/msg00010.html

Ubicity Corp: https://www.oasis-open.org/apps/org/workgroup/tosca/email/archives/201808/msg00005.html

[4] http://www.oasis-open.org/policies-guidelines/ipr

[5] http://www.oasis-open.org/committees/tosca/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-Limited-Mode
RF on Limited Terms Mode

Invitation to comment on #SAML V2.0 Subject Identifier Attributes Profile V1.0, ends Nov. 2nd

We are pleased to announce that SAML V2.0 Subject Identifier Attributes Profile Version 1.0 from the OASIS Security Services (SAML) TC [1] is now available for public review and comment. This is the third public review for this work and includes a schema submitted to the TC by the Shibboleth Project for inclusion in this draft.

Security Assertion Markup Language (SAML), developed by the Security Services Technical Committee of OASIS, is an XML-based framework for communicating user authentication, entitlement, and attribute information. As its name suggests, SAML allows business entities to make assertions regarding the identity, attributes, and entitlements of a subject to other entities, such as a partner company or another enterprise application.

The SAML V2.0 Subject Identifier Attributes Profile specification standardizes two new SAML Attributes to identify security subjects, as a replacement for long-standing inconsistent practice with the <saml:NameID> and <saml:Attribute> constructs. It also addresses recognized deficiencies with the SAML V2.0 urn:oasis:names:tc:SAML:2.0:nameid-format:persistent Name Identifier format.

The documents and related files are available here:

SAML V2.0 Subject Identifier Attributes Profile Version 1.0
Committee Specification Draft 03 / Public Review Draft 03
25 September 2018

Editable source (Authoritative):
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/saml-subject-id-attr-v1.0-csprd03.odt

HTML:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/saml-subject-id-attr-v1.0-csprd03.html

PDF:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/saml-subject-id-attr-v1.0-csprd03.pdf

Schema:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/schema/saml-subject-id-attr-v1.0.xsd

For your convenience, OASIS provides a complete package of the prose specification and related files in a ZIP distribution file. You can download the ZIP file at:

http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/saml-subject-id-attr-v1.0-csprd03.zip

How to Provide Feedback

OASIS and the SAML TC value your feedback. We solicit feedback from potential users, developers and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

This public review starts 19 October 2018 at 00:00 UTC and ends 02 November 2018 at 11:59 UTC.

This specification was previously submitted for public review [2]. This 15-day review is limited in scope to changes made from the previous review. Changes are highlighted in red-lined file included in the package [3].

Comments on the work may be submitted to the TC by following the instructions located at:

http://www.oasis-open.org/committees/comments/form.php?wg_abbrev=security

Feedback submitted by TC non-members for this work and for other work of this TC is publicly archived and can be viewed at:

http://lists.oasis-open.org/archives/security-services-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with the public review of these works, we call your attention to the OASIS IPR Policy [4] applicable especially [5] to the work of this technical committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about this specification and the SAML TC may be found on the TC’s public home page.

========== Additional references:

[1] OASIS Security Services (SAML) TC
http://www.oasis-open.org/committees/security/

[2] Previous public reviews:

– 15-day public review, 23 April 2018:
https://lists.oasis-open.org/archives/members/201804/msg00005.html
– Comment resolution log:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd02/saml-subject-id-attr-v1.0-csprd02-comment-resolution-log.txt

– 30-day public review, 14 November 2017:
https://lists.oasis-open.org/archives/members/201711/msg00004.html
– Comment resolution log:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd01/saml-subject-id-attr-v1.0-csprd01-comment-resolution-log.txt

[3] Red-lined version:
http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd03/saml-subject-id-attr-v1.0-csprd03-DIFF.pdf

[4] http://www.oasis-open.org/policies-guidelines/ipr

[5] http://www.oasis-open.org/committees/security/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-RAND-Mode
RF on RAND Mode

Invitation to comment on Electronic Court Filing v5.0 from the #ECF TC – ends Nov. 1st

We are pleased to announce that Electronic Court Filing Version 5.0 from the LegalXML Electronic Court Filing TC [1] is now available for public review and comment. This is the second public review for ECF v5.0.

ECF defines a technical architecture and a set of components, operations and message structures for an electronic court filing system, and sets forth rules governing its implementation. Version 5.0 provides a number of enhancements including:
– Support for scheduling of court hearings using WS-Calendar
– Limited electronic service of process to process servers and registered agents
– New Document Stamp and operations support retrieval of case information required for stamping
– New Court Policy MDE to better support electronic filing systems with multiple FilingReview MDEs
– Support for cancellation of filings
– Conformance with the 4.0 version of the National Information Exchange Model (NIEM), a national standard for information sharing, new NIEM domains including Biometrics and Human Services
– Conformance with the NIEM Code Lists specification version 1.0 and the representation of all ECF code lists in Genericode format.
– Conformance with the 2.2 version of the Universal Business Language (UBL).
– Better management of extensions through NIEM augmentations.
– Deprecated content references (e.g. referring to related entities with common identifiers) in favor or element references (e.g. referring to related elements with structures:ref attributes) as described in Reference Rules.
– Clarifications and improvements throughout the specification based on feedback from implementers of the ECF 4.0 and 4.01 specifications.

Version 5.0 does not assume that prior versions will be deprecated. However, it is not backward-compatible and applications using the ECF 3.0, 3.01 and 3.1, 4.0 and 4.01 specifications will not interoperate successfully with applications using this version.

The documents and related files are available here:

Electronic Court Filing Version 5.0
Committee Specification Draft 02 / Public Review Draft 02
09 October 2018

Editable source (Authoritative):
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/ecf-v5.0-csprd02.docx

HTML:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/ecf-v5.0-csprd02.html

PDF:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/ecf-v5.0-csprd02.pdf

XML schemas and Genericode code lists:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/schema/

XML example messages:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/examples/

Model and documentation:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/model/

Change Log of ECF Version 4.0 and Version 5.0:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/Change-Log.doc

ECF Version 5.0 UML model artifacts:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/uml/

For your convenience, OASIS provides a complete package of the prose document and any related files in ZIP distribution files. You can download the ZIP file at:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/ecf-v5.0-csprd02.zip

How to Provide Feedback

OASIS and the LegalXML Electronic Court Filing TC value your feedback. We solicit input from developers, users and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

The public review starts 18 October 2018 at 00:00 UTC and ends 01 November 2018 at 23:59 UTC.

This specification was previously submitted for public review [2]. This 15-day review is limited in scope to changes made from the previous review. Changes are highlighted in red-lined file included in the package [3].

Comments may be submitted to the TC by by following the instructions located at:
https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=legalxml-courtfiling.

Feedback submitted by TC non-members for this work and for other work of this TC is publicly archived and can be viewed at:
https://lists.oasis-open.org/archives/legalxml-courtfiling-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review, we call your attention to the OASIS IPR Policy [4] applicable especially [5] to the work of this technical committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about this specification and the ECF TC can be found at the TC’s public home page:
https://www.oasis-open.org/committees/legalxml-courtfiling/

========== Additional references:
[1] OASIS LegalXML Electronic Court Filing TC
https://www.oasis-open.org/committees/legalxml-courtfiling/

[2] Previous public review:
– 60-day public review:
https://lists.oasis-open.org/archives/legalxml-courtfiling/201709/msg00018.html
– Comment resolution log:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd01/ecf-v5.0-csprd01-comment-resolution-log.xlsx

[3] Red-lined version:
http://docs.oasis-open.org/legalxml-courtfiling/ecf/v5.0/csprd02/ecf-v5.0-csprd02-DIFF.pdf

[4] http://www.oasis-open.org/policies-guidelines/ipr
[5] http://www.oasis-open.org/committees/legalxml-courtfiling/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-Limited-Mode
RF on Limited Terms Mode

Call for Participation: OASIS Variability Exchange Language (VEL) Technical Committee

A new OASIS technical committee is being formed. The OASIS Variability Exchange Language (VEL) Technical Committee (TC) has been proposed by the members of OASIS listed in the charter below. The TC name, statement of purpose, scope, list of deliverables, audience, IPR mode and language specified in this proposal will constitute the TC’s official charter. Submissions of technology for consideration by the TC, and the beginning of technical discussions, may occur no sooner than the TC’s first meeting.

The eligibility requirements for becoming a participant in the TC at the first meeting are:

(a) you must be an employee or designee of an OASIS member organization or an individual member of OASIS, and

(b) you must join the Technical Committee, which members may do by using the Roster “join group: link on the TC’s web page at [a].

To be considered a voting member at the first meeting:

(a) you must join the Technical Committee at least 7 days prior to the first meeting (on or before 06 November 2018; and

(b) you must attend the first meeting of the TC, at the time and date fixed below (12 November 2018).

Participants also may join the TC at a later time. OASIS and the TC welcomes all interested parties.

Non-OASIS members who wish to participate may contact us about joining OASIS [b]. In addition, the public may access the information resources maintained for each TC: a mail list archive, document repository and public comments facility, which will be linked from the TC’s public home page at [c].

Please feel free to forward this announcement to any other appropriate lists. OASIS is an open standards organization; we encourage your participation.

———-

[a] https://www.oasis-open.org/apps/org/workgroup/vel/

[b] See http://www.oasis-open.org/join/

[c] http://www.oasis-open.org/committees/vel/

———-

CALL FOR PARTICIPATION

OASIS Variability Exchange Language (VEL) Technical Committee

The charter for this TC is as follows.

(1)(a) TC Name

OASIS Variability Exchange Language (VEL) Technical Committee

(1)(b) Statement of Purpose

VEL TC members will develop an interoperability standard that will enable the exchange of variability information among variant management tools and systems development tools. VEL will eliminate the cost of building customized interfaces by defining a standard way for information to be exchanged between tools.

Variability is a widely used model for describing common and unique features of systems at all stages of the lifecycle. It describes the ability of artifacts to be used in different contexts by changing or customizing some characteristics of them, and those changeable characteristics are localized somewhere within the artifacts.

Tools for variant management frequently interact with artifacts such as model based specifications, program code, or requirements documents. This is often a two-way communication: variant management tools import variability information from an artifact, and in return export variant configurations. For example, they need to gather information about the variation points contained in the artifact, identify which variants are already defined, and then modify existing or define new variants.

At present, however, there is no standard that would define how variation points are expressed in different artifacts. That means that a supplier who builds a variants management tool has to implement an individual interface to each tool that is used in a development process to create the corresponding artifacts.

There is currently no standardized API to support two-way communication, so variant management tools need to implement a separate interface — and possibly a new data format as well — for each new artifact. Worse, each variant management tool needs to do this separately. With m variant management tools and ‘n ‘artifacts, this may require the implementation of up to ‘m x n’ different interfaces.

Variant management tools and development tools inherently operate at odds with one another. Variant management tools represent and analyze the variability of a system abstractly and define system configurations by selecting demanded features. System development tools, on the other hand, are designed to capture specific kinds of information, such as requirements, architecture, component design, or tests. In order to support variable systems, development tools must either offer the capability to express variability directly or provide an add-on piece of software that does.

The goal of the OASIS Variability Exchange Language (VEL) TC is to enable the exchange of variability information among tools for variant management tools and systems development tools. VEL will eliminate the cost of building customized interfaces by defining a standard way for information to be exchanged among corresponding tools. Using VEL, a variant management tool will be able to read the variability from a development tool and pass configurations of selected system features to a development tool.

By defining a common variability data interface that can be implemented by both the development tools and the variant management tools, VEL will enable a continuous development process for variable systems and more flexible use of tools.

(1)(c) Scope

The TC will accept as input the following initial contributions:

1. VEL Specification Document
http://www.variability-exchange-language.org/download/variabilityexchangelanguage.pdf

2. Enterprise Architect Model
http://www.variability-exchange-language.org/download/vel_enterprise_architect_model.eap

3. XML Schema
http://www.variability-exchange-language.org/download/vel_xmlscheme

4. Schulze, Michael, and Robert Hellebrand. “Variability Exchange Language-A Generic Exchange Format for Variability Data.” Software Engineering (Workshops). 2015.

The TC will refine these initial contributions to produce OASIS standard specifications, including necessary supporting documentation. Further contributions, including other interfaces and domain models from TC members, will be accepted for consideration without any prejudice or restrictions and evaluated based on technical merit insofar as they conform to this charter.

The scope of the TC’s work is limited to technical refinements to the features defined in the input contributions. Modest extensions to the Variability Exchange Language that substantively increase interoperability will also be considered. However, the TC’s main focus is to refine the functionality presented in the input documents. Other contributions will be collected and can be considered in subsequent versions of the standard.

Out of Scope

The following is a non-exhaustive list provided only for the sake of clarity. If some function, mechanism or feature is not mentioned here, and it is not mentioned as in-scope in the Scope of Work section, then it will be deemed to be out of scope.

The following items are specifically out of scope of the work of the TC:

* Defining variability/variation points within arbitrary development artifacts

* Mapping of VEL constructs to any kind of development artifact

* Interaction schemes or workflows between tools

* Adding unnecessary complication to the protocol by extending beyond the scope described above

Contributions to this TC which are out of scope for this charter may be accumulated and taken into consideration for potential development of a charter for another technical committee that may be created to address future extensions or modifications to VEL.

(1)(d) Deliverables

The TC will produce within 12 to 16 months

* an XML schema setting the vocabulary, constraints and semantics of the VEL format, and

* a written specification, describing the XML schema’s elements and attributes in plain English.

(1)(e) IPR Mode

This TC will operate under the “Non-Assertion” IPR mode as defined in the OASIS Intellectual Property Rights (IPR) Policy.

(1)(f) Audience

The VEL standard will be designed for use in automotive, avionics, automation, transportation, electronics, healthcare, and any industry where variants exist.

The anticipated audience for participating in VEL standardization and supporting its adoption includes:

1. Providers of products and/or services designed to host or support systems and software development.

2. Implementers of solutions that require interoperability between variant management tools and system development tools.

3. Authors of other specifications that require a variability data exchange format.

4. Consultants, educators, and interested parties.

(1)(g) Language

The OASIS Variability Exchange Language (VEL) Technical Committee will conduct its business in English.

(2) Non-normative information regarding the startup of the TC

(2) (a) Similar or Applicable Work

Similar or related work in the area of languages and exchange formats in general is manifold, but usually is more centered around the exchange of application data like geographical information (GPS Exchange Format – GPX) or multimedia data (Broadcast Metadata Exchange Format – BMF) to name just two. However, if the context is more on data needed for developing systems, the picture looks different. Focusing further on the exchange of development data supporting variability information, the number of existing related work is rather low.

Some standards like AUTOSAR, EAST-ADL, or IP-XACT define exchange formats and to different extents it is possible to cope with variability. For example, IP-XACT has a notion of a variant, enabling the specification of those elements that are belonging to a variant. What is not supported is to describe which elements are variable at all. In contrast to IP-XACT, EAST-ADL has the notion of variation points and thus provides the functionality to indicate model elements as variable but on the other side EAST-ADL has no notion of a variant. AUTOSAR supports both concepts and thus is the most complete solution with respect to variability. The downside even of the AUTOSAR solution is that the provided possibilities are not generic enough to be used in other contexts as for which they were designed for.

A promising language for the generic description of variability is the Common Variability Languages (CVL), since CVL provides all needed concepts to cope with variability in a generic, and where possible, artifact independent way. The disadvantage of the language specification is the lack of a serialized data representation, which may be usable for the exchange between tools. In contrast to CVL, which describes how to realize variability description inside a tool, VEL specifies a communication interface and a data exchange format. The interpretation and use of the exchanged data remain the responsibility of the tool providers.

(2) (b) Date, Time, and Location of First Meeting

The first meeting will be held through teleconference on 4-5pm (CET) Nov 12th, 2018 and pure-systems GmbH will sponsor this call.

(2)(c) On-Going Meeting Plans & Sponsors

The TC intends to meet by teleconference every two weeks. Sponsorship for these meetings will be rotated through the Organizational Members represented on the TC.

(2)(d) Proposers of the TC

Michael Schulze – pure-systems GmbH – michael.schulze@pure-systems.com
Uwe Ryssel – pure-systems GmbH – uwe.ryssel@pure-systems.com

Gilles Malfreyt – Thales – gilles.malfreyt@thalesgroup.com
Eric Gauthier – Thales – eric.gauthier@thalesgroup.com
Jean-Christophe Orhant – Thales – jean-christophe.orhant@thalesgroup.com

Joana Corte-Real – Siemens – joana.corte-real@siemens.com
Bill Chown – Siemens – bill.chown@siemens.com,

Damir Nesic – KTH Royal Institute of Technology – damirn@kth.se

Hedley Apperly – PTC Inc. – happerly@ptc.com

Himanshu CHAWLA – Dassault Systèmes – Himanshu.CHAWLA@3ds.com

Mario Forlingieri – Accenture – marco.forlingieri@accenture.com

(2)(e) Statements of Support

I, Danilo Beuche, Danilo.Beuche@pure-systems.com, as OASIS primary representative of pure-systems GmbH organization, confirm our support for the VEL Technical Committee charter and endorse our proposers listed above as named co-proposers.

I, Jon Geater, Jon.Geater@thalesesecurity.com, as OASIS primary representative for Thales, confirm our support for this proposed Charter and endorse our participants listed below as named co-proposers: Eric Gauthier, Jean-Christophe Orhant, Gilles Malfreyt.

I, Marquart Franz marquart.franz@siemens.com as Siemens primary representative to OASIS, confirm our support for the VEL Technical Committee proposed charter and the participation of our organization’s co-proposer [Joana Corte-Real, Bill Chown] as named above.

I, Martin Törngren, martint@kth.se, as OASIS primary representative for KTH Royal Institute of Technology, confirm our support for the proposed Charter and TC for standardizing the “Variability Exchange Language”. I endorse our participants as named co-proposers: Damir Nesic, KTH Royal Institute of Technology.

I, Martin Sarabura, msarabura@ptc.com, as OASIS primary representative of PTC Inc., confirm our support for the VEL Technical Committee charter and endorse our proposer listed above as a named co-proposer.

I, Gauthier Fanmuy, gauthier.fanmuy@3ds.com , as OASIS primary representative for Dassault Systèmes, confirm our support for TC for standardizing the Variability Exchange Language. I endorse our participant as named co-proposer: Himanshu CHAWLA.

I, Robert Coderre, robert.c.coderre@accenture.com, as OASIS primary representative for Accenture, confirm our support for the proposed VEL Charter and endorse our participant listed below as named co-proposers: Marco Forlingieri
 
(2)(f) TC Convener

The TC Convener for the first meeting will be Michael Schulze from pure-systems GmbH.

(2)(g) Affiliation to Member Section

None

(2)(h) Initial contributions:

Those are given in under Section (1)(c) Scope.

EDXL Tracking of Emergency Patients (TEP) v1.1 from Emergency Management TC approved as a Committee Specification

OASIS is pleased to announce that Emergency Data Exchange Language (EDXL) Tracking of Emergency Patients (TEP) v1.1 from the OASIS Emergency Management TC [1] has been approved as an OASIS Committee Specification.

The Emergency Management TC creates vendor-neutral, platform agnostic standards for organizations and agencies to more easily exchange emergency information. The TC welcomes participation from members of the emergency management and response community, developers and implementers, and members of the public concerned with disaster management and response.

The Emergency Data Exchange Language (EDXL) is a broad initiative to create an integrated framework for a wide range of emergency data exchange standards to support operations, logistics, planning and finance.

EDXL-TEP is an XML messaging standard primarily for exchange of emergency patient and tracking information from the point of patient encounter through definitive care admission or field release. TEP supports patient tracking across the Emergency Medical Services (EMS) care continuum, as well as hospital evacuations and patient transfers, providing real-time information to responders, Emergency Management, coordinating organizations and care facilities in the chain of care and transport.

This Committee Specification is an OASIS deliverable, completed and approved by the TC and fully ready for testing and implementation.

The prose specifications and related files are available here:

Emergency Data Exchange Language (EDXL) Tracking of Emergency Patients (TEP) Version 1.1
Committee Specification 02
21 September 2018

Editable source (Authoritative):
http://docs.oasis-open.org/emergency/edxl-tep/v1.1/cs02/edxl-tep-v1.1-cs02.doc

HTML:
http://docs.oasis-open.org/emergency/edxl-tep/v1.1/cs02/edxl-tep-v1.1-cs02.html

PDF:
http://docs.oasis-open.org/emergency/edxl-tep/v1.1/cs02/edxl-tep-v1.1-cs02.pdf

XML schemas:
http://docs.oasis-open.org/emergency/edxl-tep/v1.1/cs02/schema/

For your convenience, OASIS provides a complete package of the prose document and related files in a ZIP distribution file. You can download the ZIP file here:
http://docs.oasis-open.org/emergency/edxl-tep/v1.1/cs02/edxl-tep-v1.1-cs02.zip

Members of the Emergency Management TC [1] approved this specification by Special Majority Vote. The specification had been released for public review as required by the TC Process [2]. The vote to approve as a Committee Specification passed [3], and the document is now available online in the OASIS Library as referenced above.

Our congratulations to the TC on achieving this milestone and our thanks to the reviewers who provided feedback on the specification drafts to help improve the quality of the work.

========== Additional references:
[1] OASIS Emergency Management TC
https://www.oasis-open.org/committees/emergency/

[2] Public reviews:
* 30-day public review, 05 October 2015: https://lists.oasis-open.org/archives/members/201510/msg00001.html
– Comment resolution log: http://docs.oasis-open.org/emergency/edxl-tep/v1.1/csprd01/edxl-tep-v1.1-csprd01-comment-resolution-log.xlsx
* 15-day public review, 17 August 2018: https://lists.oasis-open.org/archives/emergency/201808/msg00015.html
– Comment resolution log: http://docs.oasis-open.org/emergency/edxl-tep/v1.1/csprd02/edxl-tep-v1.1-csprd02-comment-resolution-log.txt

[3] Approval ballot:
https://www.oasis-open.org/committees/ballot.php?id=3250

#AMQP Anonymous Terminus v1.0 and AMQP Connection Uniqueness v1.0 from AMQP TC approved as Committee Specifications

OASIS is pleased to announce that Using the AMQP Anonymous Terminus for Message Routing Version 1.0 and Advanced Message Queuing Protocol (AMQP) Enforcing Connection Uniqueness Version 1.0 from the OASIS Advanced Message Queuing Protocol AMQP TC [1] have been approved as OASIS Committee Specifications.

AMQP is a vendor-neutral, platform-agnostic protocol for passing real-time data streams and business transactions. The goal of AMQP is to ensure information is safely and efficiently transported between applications, among organizations, across distributed cloud computing environments, and within mobile infrastructures by enabling a commoditized, multi-vendor ecosystem.

Anonymous Terminus for Message Routing defines a mechanism whereby a single outgoing link can be used to transfer messages which are then routed using the address carried in their “to” field.

Enforcing Connection Uniqueness defines a mechanism by which two processes communicating using AMQP v1.0 can ensure and enforce that there exists only a single open AMQP connection between the two of them.

These Committee Specifications are OASIS deliverables, completed and approved by the TC and fully ready for testing and implementation.

The prose specifications and related files are available here:

Using the AMQP Anonymous Terminus for Message Routing Version 1.0
Committee Specification 01
17 September 2018

Editable source (Authoritative):
http://docs.oasis-open.org/amqp/anonterm/v1.0/cs01/anonterm-v1.0-cs01.xml
HTML:
http://docs.oasis-open.org/amqp/anonterm/v1.0/cs01/anonterm-v1.0-cs01.html
PDF:
http://docs.oasis-open.org/amqp/anonterm/v1.0/cs01/anonterm-v1.0-cs01.pdf
ZIP (complete package of the prose specification and related files)
http://docs.oasis-open.org/amqp/anonterm/v1.0/cs01/anonterm-v1.0-cs01.zip

Advanced Message Queuing Protocol (AMQP) Enforcing Connection Uniqueness Version 1.0
Committee Specification 01
17 September 2018

Editable source (Authoritative):
http://docs.oasis-open.org/amqp/soleconn/v1.0/cs01/soleconn-v1.0-cs01.xml
HTML:
http://docs.oasis-open.org/amqp/soleconn/v1.0/cs01/soleconn-v1.0-cs01.html
PDF:
http://docs.oasis-open.org/amqp/soleconn/v1.0/cs01/soleconn-v1.0-cs01.pdf
ZIP (complete package of the prose specification and related files)
http://docs.oasis-open.org/amqp/soleconn/v1.0/cs01/soleconn-v1.0-cs01.zip

Members of the AMQP TC [1] approved these specification by Special Majority Vote. The specifications had been released for public review as required by the TC Process [2]. The votes to approve as a Committee Specification passed [3], and the documents are now available online in the OASIS Library as referenced above.

Our congratulations to the TC on achieving this milestone and our thanks to the reviewers who provided feedback on the specification drafts to help improve the quality of the work.

========== Additional references:
[1] Advanced Message Queuing Protocol (AMQP) TC
https://www.oasis-open.org/committees/amqp/

[2] Public reviews:
* 30-day public reviews, 16 July 2018:
https://lists.oasis-open.org/archives/amqp/201807/msg00000.html
– Comment resolution logs:
http://docs.oasis-open.org/amqp/anonterm/v1.0/csprd01/anonterm-v1.0-csprd01-comment-resolution-log.ods
http://docs.oasis-open.org/amqp/soleconn/v1.0/csprd01/soleconn-v1.0-csprd01-comment-resolution-log.ods

[3] Approval ballots:
https://www.oasis-open.org/committees/ballot.php?id=3246
https://www.oasis-open.org/committees/ballot.php?id=3247

U.S. to Help Define New International Standard for Consumer Privacy by Design

Oct 9, 2018 – Defining international standards for privacy is critical for the future of global commerce. To support this cause, many of America’s leading companies and government agencies are collaborating to help define the new international standard for “Consumer Protection: Privacy by Design”. The standard will be part of ISO Project Committee 317. As one of 12 countries with Participant status in ISO/PC 317, the United States will be represented by its Technical Advisory Group (TAG), administered by the American National Standards Institute (ANSI) in partnership with the OASIS standards and open source consortium. Members of the U.S. TAG represent America’s leading companies and government agencies committed to privacy rights for consumers.

“ISO/PC 317 will complement the efforts of the European GDPR standard aiming to aid in the prevention of data breaches while giving consumers more control over the use of their data,” said Rik Parker of KPMG, chair of the U.S. TAG to ISO/PC 317. “By being involved from the outset, the U.S. can be sure that this international standard is practical, well-conceived, and adoptable across complex organizations.”

“The implementation of data privacy principles and data protection requirements into an organization’s business processes has become one of the most complex business challenges of the 21st century,” said Debra Farber of BigID, vice chair of the U.S TAG to ISO/PC 317. “I consider it a tremendous honor to contribute to the establishment of a global set of regulatory-agnostic guidelines that embed privacy into products and services by design and default.”

“It’s a huge endeavor—but one we have to take on now,” added Aris Gkoulalas-Divanis of IBM Watson Health, vice chair of the U.S. TAG to ISO/PC 317. “Every organization that deals with consumer data is going to be impacted by the standard we produce in ISO/PC 317. State-of-the-art privacy enhancing technologies, including privacy and security controls, should be incorporated into product design to offer end-to-end privacy protection while allowing products to deliver on their intended functionality.”

In addition to the U.S., 11 other countries, including the U.K., China, Canada, and Korea, have a voice in establishing this global standard. The first meeting of ISO/PC 317 will be held in London, Nov 1-2, 2018.

Representation on the U.S. TAG to ISO/PC 317 is open to U.S.-based companies, national and local government agencies, and researchers that digitally collect or process consumer data.

More information on the U.S. TAG to ISO/PC 317 is at: https://www.ansi.org/standards_activities/standards_boards_panels/PC317

Support from U.S. TAG members

American Express
“At American Express, we have a long-standing commitment to protecting the privacy and data of our customers. We are proud to support ISO/PC 317 and believe that consumer privacy rights are at the core of technological innovation.”
— Louise Thorpe, Chief Privacy Officer, American Express

Equifax
“As part of Equifax’s ongoing transformation and commitment to data security, we’re continuing to put the consumer at the forefront of everything we do. The advisory committee will provide a forum for sharing what we’ve learned over the past year, and together as a team of experts, we can incorporate those learnings into a global framework that will ultimately enhance the privacy of personal data.”
— Nick Oldham, Chief Privacy and Data Governance Officer, Equifax

MailChimp
“As a company committed to safeguarding personal data and helping small businesses grow and succeed, we have embraced privacy by design as a core principle. We are pleased to participate in the U.S. Technical Advisory Group to ISO/PC 317 as a voice for our small business customers, and to collaborate in shaping the new privacy by design standard to be accessible to small businesses and scalable for their unique needs.”
— Meghan Farmer, Data Protection Officer, MailChimp

Mastercard
“Privacy by Design is the cornerstone of our privacy strategy at Mastercard, and we believe it is essential to effectively protect individuals’ privacy while enabling future innovation. The work of the U.S. TAG in support of ISO/PC 317 will be critical to provide organizations with practical guidance to operationalize Privacy by Design.”
— Caroline Louveaux, Mastercard’s Chief Privacy Officer

OneTrust
“Privacy laws are a baseline. Companies that want to set themselves apart need to gain the trust of their customers by designing with privacy in mind throughout the entire development life cycle. ISO/PC 317 will be an excellent tool to convert that aspiration into action. OneTrust is proud to be a part of the working group developing ISO/PC 317 and we look forward to working with other industry leaders to develop what is likely to be the gold standard for privacy by design.”
— Andrew Clearwater, Director of Privacy, OneTrust

Return Path
“In today’s interconnected world, we know that consumers are concerned about their privacy and how their data is being used. This fear creates a lack of trust, which isn’t healthy for any business. At Return Path, privacy has always been a top priority. We’re proud to participate in the ISO/PC 317, and we believe the committee’s work will enhance consumer trust, while also enforcing compliance with applicable regulations.”
— Dennis Dayman, Chief Privacy and Security Officer, Return Path

Uber
“Privacy by design as well as ethical privacy practices and processes can enhance technology innovation. Uber looks forward to helping create a global approach to consumer privacy standards that create better products and user experiences.”
— Ruby Zefo, Chief Privacy Officer, Uber

Verizon
“Verizon looks forward to working with the other members of the U.S. TAG to contribute to the development of the ISO privacy by design standard.”
— Karen Zacharia, Chief Privacy Officer, Verizon

WireWheel
“WireWheel’s mission is to help our customers show that they are outstanding custodians of personal information. We are proud to be a founding member of the Privacy by Design ISO US Technical Advisory Group. This ISO Project Committee has a real opportunity to further Privacy by Design for all companies by setting standards for including privacy in products and services.”
– Justin Antonipillai, CEO, WireWheel

About ANSI

The American National Standards Institute (ANSI) is a private non-profit organization whose mission is to enhance U.S. global competitiveness and the American quality of life by promoting, facilitating, and safeguarding the integrity of the voluntary standardization and conformity assessment system. Its membership is comprised of businesses, professional societies and trade associations, standards developers, government agencies, and consumer and labor organizations. The Institute represents and serves the diverse interests of more than 270,000 companies and organizations and 30 million professionals worldwide. ANSI is the official U.S. representative to the International Organization for Standardization (ISO) and, via the U.S. National Committee, the International Electrotechnical Commission (IEC). www.ansi.org.

About OASIS

OASIS is one of the most respected, member-driven standards bodies in the world. It offers standards and open source projects a path to recognition in international policy and procurement. OASIS has a broad technical agenda encompassing cybersecurity, privacy, cryptography, cloud computing, IoT, legal, emergency management, augmented reality, and more. Any initiative for developing code, APIs, specifications, or reference implementations can find a home at OASIS. Each project operates independently under industry-approved process and IPR policies. Some of the most widely adopted OASIS Standards include AMQP, CAP, CMIS, DITA, DocBook, KMIP, MQTT, OpenC2, OpenDocument, PKCS, SAML, STIX, TAXII, TOSCA, UBL, and XLIFF. Many of these have gone on to be published as ISO, IEC, or ITU standards. New work is encouraged, and all are welcome to participate. OASIS members can be found in 100+ countries on virtually every continent. Major multinational companies, SMEs, government agencies, universities, research institutions, consulting groups, and individuals are represented. http://www.oasis-open.org http://www.oasis-open-projects.org

# # #

Media inquiries: communications@oasis-open.org; +1.941.284.0403

Borderless Cyber USA 2018 Assembles Cybersecurity Experts to Explore Latest Innovations and Strategies

Washington, DC, USA; 3 October 2018,Borderless Cyber USA 2018 is a two-day cybersecurity conference taking place at The World Bank in Washington, DC, Oct. 3-4, 2018.

The event features a diverse set of keynote speakers from both government and private industry—leaders who are implementing the latest technologies to protect organizations and their users against cybersecurity threats. The event also includes sessions lead by global experts who share their real-world experience and recommendations.

The conference will be followed by a one-day training session on the STIX 2 and TAXII 2 standards for threat intelligence sharing.

Borderless Cyber is organized by The World Bank, the OASIS open source and standards consortium, Georgetown University, and the Institute for Critical Infrastructure Technology.

Keynote Speakers:

– Melissa Hathaway, President of Hathaway Global Strategies, served under two U.S. presidents where she ran the Comprehensive National Cybersecurity Initiative (CNCI) and spearheaded the Cyberspace Policy Review.

– Gupta, Director of Security at Facebook, has spent the past 20 years developing secure, scalable security software that has protected billions of users.

– William Evanina, Director of the National Counterintelligence and Security Center, is the principal security advisor for the U.S. Director of National Intelligence.

– Melanie Ensign, Security and Privacy Communications Lead at Uber, specializes in reputation management, media engagement, and incident response.

– Ursula Owusu-Ekuful, a member of the Ghanaian Parliament, previously served as Ghana’s Minister of Communications.

– Tony Scott, Managing Partner at Ridge-Lane Limited Partners, served as the U.S. Federal Chief Information Officer from 2015 through 2017.

Support for Borderless Cyber

EclecticIQ
“Borderless Cyber USA, with its focus on STIX-TAXII training, help the cybersecurity community to strategically align in the fight against adversaries. We are proud to be a platinum sponsor.”
— Dane Coyer, General Manager EclecticIQ North America

Fujitsu
“Fujitsu will demonstrate S-TIP (Seamless – Threat Intelligence Platform) proto-type at Borderless Cyber. This platform merges human (SNS, email) and system (STIX/TAXII) CTI sharing seamlessly to help reveal 5Ws1H of cyber-attacks (such as threat actors, time periods, objectives, attack targets, intrusion paths, methods) with its capabilities like CTI graph analytics engine. Fujitsu has been a CTI TC member since the OASIS CTI Technical Committee’s establishment.
–Hitoshi Habe, Director of Marketing & Sales (Cyber Systems), Defense Systems Unit, Fujitsu

IBM Security
“At IBM Security, we’re constantly innovating to find new and better ways to protect your data and the people it belongs to — your customers. But your customers are also our family, our friends, and our neighbors — people we care about. That’s why our 8,000 IBM Security global employees exist to protect the world, freeing you to thrive in the face of cyber uncertainty. As the market leader in enterprise security, we hold more then 3,700 security-related patents and monitor over 60B+ security events per day.”
–Jason Keirstead, Lead Architect, IBM.Security

NC4
“Cybersecurity is one of the biggest challenges facing organizations all over the world. NC4 is excited to participate in Borderless Cyber USA to be part of conversations around best practices in turning cyber intelligence into defensive action to make all of our communities safer.”
— George Johnson, VP of Cyber Solutions and Chief Security Officer, NC4

NormShield
“In a world where the weakest link in a corporate cyber security system is a trusted supplier connected to the company’s network. NormShield’s non-intrusive cloud-based external cyber risk assessment can scan suppliers’ networks and cloud/web applications, in 60 seconds, and provide corporate supply chain risk managers with a comprehensive Cyber Risk Scorecard based on industry standards that will assess the suppliers’ cyber risk posture and provide visibility to what hackers are able to discover as well as immediate remediation recommendations.”
— Mohamoud Jibrell, Co-Founder & CEO, NormShield

ThreatQuotient
“ThreatQuotient is looking forward to the opportunity to share a stage with our industry peers at Borderless Cyber in DC. We all share a common goal to bring order to the chaos of security operations, and ThreatQuotient views the chance to share diverse insight with the organizations on the frontlines as a great responsibility. Threat intelligence programs can take on a lot of forms, but the role threat intelligence remains critical.”
— Ryan Trost, Co-Founder and CTO, ThreatQuotient

Additional Information
Visit us18.borderlesscyber.org to view the full program and speaker list or to learn more about the STIX/TAXII 2.0 Training that follows the event.

###

About OASIS:
OASIS is one of the most respected, member-driven standards bodies in the world. It offers standards and open source projects a path to recognition in international policy and procurement. OASIS has a broad technical agenda encompassing cybersecurity, privacy, cryptography, cloud computing, IoT, legal, emergency management, augmented reality, and more. Any initiative for developing code, APIs, specifications, or reference implementations can find a home at OASIS. Each project operates independently under industry-approved process and IPR policies. Some of the most widely adopted OASIS Standards include AMQP, CAP, CMIS, DITA, DocBook, KMIP, MQTT, OpenC2, OpenDocument, PKCS, SAML, STIX, TAXII, TOSCA, UBL, and XLIFF. Many of these have gone on to be published as ISO, IEC, or ITU standards. New work is encouraged, and all are welcome to participate. OASIS members can be found in 100+ countries on virtually every continent. Major multinational companies, SMEs, government agencies, universities, research institutions, consulting groups, and individuals are represented. http://www.oasis-open.org http://www.oasis-open-projects.org

Press Contact: communications@oasis-open.org +1.941.284.0403

Invitation to comment on The DocBook Schema v5.0.1 – ends Oct. 20th

OASIS and the OASIS DocBook TC are pleased to announce that The DocBook Schema Version 5.0.1 is now available for public review and comment.

DocBook is widely used in computer hardware and software documentation in both commercial and Open Source environments. Broadly, this includes both print and online tutorial and reference documentation as well as online help, user guides, exercises and other ancillary forms of documentation.

The DocBook Version 5.0 schema was delivered in 2009 using the RelaxNG schema language with additional constraints specified in Schematron. The Schematron rules changed after DocBook 5.0 was released, so some Schematron tools do not work with DocBook 5.0. The DocBook 5.0.1 specification is updated with the new Schematron rules so users can continue using DocBook 5.0 if they need to use newer Schematron tools.

The documents and related files are available here:

The DocBook Schema Version 5.0.1
Committee Specification Draft 01 / Public Review Draft 01
12 September 2018

Editable source (Authoritative):
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/docbook-v5.0.1-csprd01.docx
HTML:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/docbook-v5.0.1-csprd01.html
PDF:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/docbook-v5.0.1-csprd01.pdf
Relax NG schemas:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/rng/
Schematron schema:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/sch/
DTD schema:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/dtd/
XML schemas:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/xsd/
catalog.xml:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/catalog.xml
docbook.nvdl:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/schemas/docbook.nvdl

For your convenience, OASIS provides a complete package of the specification document and any related files in ZIP distribution files. You can download the ZIP file at:
http://docs.oasis-open.org/docbook/docbook/v5.0.1/csprd01/docbook-v5.0.1-csprd01.zip

How to Provide Feedback

OASIS and the OASIS DocBook TC value your feedback. We solicit input from developers, users and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

The public review starts September 21 at 00:00 UTC and ends October 20 at 23:59 UTC.

Comments may be submitted to the TC by any person through the use of the OASIS TC Comment Facility which can be used by following the instructions on the TC’s “Send A Comment” page (https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=docbook).

Comments submitted by TC non-members for this work and for other work of this TC are publicly archived and can be viewed at:
https://lists.oasis-open.org/archives/docbook-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review, we call your attention to the OASIS IPR Policy [1] applicable especially [2] to the work of this technical committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about the specification and the DocBook TC can be found at the TC’s public home page:

https://www.oasis-open.org/committees/docbook/

========== Additional references:

[1] http://www.oasis-open.org/who/intellectualproperty.php

[2] http://www.oasis-open.org/committees/docbook/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-Limited-Mode
RF on Limited Terms Mode

Invitation to comment on XACML REST Profile v1.1 and JSON Profile of XACML 3.0 v1.1 – ends Oct. 20th

OASIS and the OASIS eXtensible Access Control Markup Language (XACML) TC are pleased to announce that XACML REST Profile Version 1.1 and JSON Profile of XACML 3.0 Version 1.1 are now available for public review and comment.

The REST Profile specification defines a profile for the use of XACML in a RESTful architecture.

The JSON profile proposes a standardized interface between a policy enforcement point and a policy decision point using JSON, leveraging the decision request and response structure specified in the core XACML standard.

The documents and related files are available here:

XACML REST Profile Version 1.1
Committee Specification Draft 01 / Public Review Draft 01
24 August 2018

Editable source: (Authoritative)
http://docs.oasis-open.org/xacml/xacml-rest/v1.1/csprd01/xacml-rest-v1.1-csprd01.doc
HTML:
http://docs.oasis-open.org/xacml/xacml-rest/v1.1/csprd01/xacml-rest-v1.1-csprd01.html
PDF:
http://docs.oasis-open.org/xacml/xacml-rest/v1.1/csprd01/xacml-rest-v1.1-csprd01.pdf
ZIP: (complete package of the specification documents and any related files)
http://docs.oasis-open.org/xacml/xacml-rest/v1.1/csprd01/xacml-rest-v1.1-csprd01.zip

JSON Profile of XACML 3.0 Version 1.1
Committee Specification Draft 01 / Public Review Draft 01
24 August 2018

Editable source: (Authoritative)
http://docs.oasis-open.org/xacml/xacml-json-http/v1.1/csprd01/xacml-json-http-v1.1-csprd01.doc
HTML:
http://docs.oasis-open.org/xacml/xacml-json-http/v1.1/csprd01/xacml-json-http-v1.1-csprd01.html
PDF:
http://docs.oasis-open.org/xacml/xacml-json-http/v1.1/csprd01/xacml-json-http-v1.1-csprd01.pdf
ZIP: (complete package of the specification documents and any related files)
http://docs.oasis-open.org/xacml/xacml-json-http/v1.1/csprd01/xacml-json-http-v1.1-csprd01.zip

How to Provide Feedback

OASIS and the OASIS eXtensible Access Control Markup Language (XACML) TC value your feedback. We solicit input from developers, users and others, whether OASIS members or not, for the sake of improving the interoperability and quality of its technical work.

The public reviews start September 21 at 00:00 UTC and ends October 20 at 23:59 UTC.

Comments may be submitted to the TC by any person through the use of the OASIS TC Comment Facility which can be used by following the instructions on the TC’s “Send A Comment” page (https://www.oasis-open.org/committees/comments/index.php?wg_abbrev=xacml).

Comments submitted by TC non-members for these works and for other work of this TC are publicly archived and can be viewed at:
https://lists.oasis-open.org/archives/xacml-comment/

All comments submitted to OASIS are subject to the OASIS Feedback License, which ensures that the feedback you provide carries the same obligations at least as the obligations of the TC members. In connection with this public review, we call your attention to the OASIS IPR Policy [1] applicable especially [2] to the work of this Technical Committee. All members of the TC should be familiar with this document, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved OASIS specification.

OASIS invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above specification, so that notice of them may be posted to the notice page for this TC’s work.

Additional information about the specification and the XACML TC can be found at the TC’s public home page:
https://www.oasis-open.org/committees/xacml/

========== Additional references:

[1] http://www.oasis-open.org/who/intellectualproperty.php

[2] http://www.oasis-open.org/committees/xacml/ipr.php
https://www.oasis-open.org/policies-guidelines/ipr#RF-on-Limited-Mode
RF on Limited Terms Mode

No results with the selected filters