OASIS Open

Please join meeting from your computer, tablet or smartphone.

https://www.gotomeeting.com/join/615430365

You can also dial in using your phone.

United States: +1 (571) 317-3112

Access Code: 615-430-365

Agenda:

• (1) Working Group Charter
• (2) Certification Framework Options
• (3) Certification Framework Working Group Meeting Schedule

Read-ahead: Please review the referenced paper below in preparation for this discussion.:

https://www.oasis-open.org/committees/download.php/57107/Self-Certification-at-OASIS-v10.pdf

Summary:

Primary agenda for Certification Framework WG Kickoff Meeting is to review, formalize, and frame the set of Certification Framework options for decision by the CTI TC.

Options:

• (1) Uncontrolled self-certification: each candidate defines or uses its own test framework and test suite, and executes its own testing, without oversight. The testing is based on minimal test material produced by the TC, typically a set of test assertions and test guidelines. The candidate posts its test results, and remains open for particular inquiries from 3rd parties (e.g. customers) about test details. This option does not provide much guarantee – it is “user beware” – But is easiest to support by OASIS and TCs.
• (2) Resource-based local self-certification: In this option, the testing is entirely done on the user side, but the resources necessary to do so are provided by the TC. The user downloads test framework components and test suites and runs them locally. WS-I is an example of this style of certification. This option provides more guarantee, as the tools and test suites are same for all candidates and are developed and validated by a third party.
• (3) Service-based self-certification: In this option, testing is provided as a remote automated service. In addition to the test tools and test suite being developed by a third party, the core of the testing operation takes place on or is controlled by the service site, which is where test results are collected. A variant would allow the user to upload its implementation or part of it on the service site.
• (4) Any other options we want propose to the CTI TC

Your CTI TC Interoperability Subcommittee Chairs,

David Eilken – Soltra

Patrick Maroney – Integrated Networking Technologies, Inc.

• OASIS Open (General Membership)
• General Public
• OASIS Cyber Threat Intelligence (CTI) TC