News

2020-04-21

OASIS Enhances Commitment to Open Source and Standards by Appointing Guy Martin as Executive Director

2020-02-25

Open Cybersecurity Alliance Unveils First Open Source Language to Connect Security Tools

2020-02-23

Interoperability Between Leading Key Management Vendors Demonstrates Continued Strength of OASIS KMIP Standard at RSA 2020

Cryptsoft, Fortanix, IBM, PrimeKey, Quintessence Labs and Utimaco Collaborate in Support of KMIP 2.0 and 2.1 at Major Security Event

2020-02-14

U.S. Leaders Help Define International Standards for Sharing Economy

AIG, Allstate, CaaStle, eBay, EVShare, FinTech4Good, Gig Economy Group, Indiegogo, Marketplace Risk, Microsoft, NearMe, NECF, One Beacon, Postmates, Privacy Orchards, Seva Exchange, S-Fractal, SkillShare, Slice Labs, Tradesy, TrendUp, Turo, Uber, and Upwork Lead U.S. Technical Advisory Group to ISO/TC 324 under ANSI and OASIS

2019-10-08

Cybersecurity Leaders Launch Initiative for Interoperable Security Technologies to Thwart Attacks

Open Cybersecurity Alliance to connect the fragmented cybersecurity landscape with common, open source code and practices. IBM Security and McAfee join with Advanced Cyber Security Corp, Corsa, CrowdStrike, CyberArk, Cybereason, DFLabs, EclecticIQ, Electric Power Research Institute, Fortinet, Indegy, New Context, ReversingLabs, SafeBreach, Syncurity, ThreatQuotient, and Tufin to collaborate on new initiative at OASIS

2019-09-23

Industry Leaders Collaborate at OASIS to Define Cybersecurity Course-of-Action Playbooks with CACAO

Accenture, Cisco, Cyware, EclecticIQ, FireEye, Fornetix, IBM, New Context, Syncurity, ThreatQuotient, U.S. NIST, and Others Will Develop Machine Readable Cyber Response Playbooks

2019-05-07

OASIS Introduces Open Projects Program to Bridge Open Source and Standards Development

AirBus, CIB, Fujitsu, IBM, Red Hat, Siemens, Software AG, The Document Foundation, and Others Sponsor Open Projects

2019-03-04

RSA 2019 Features Multi-vendor Key Management Interoperability Protocol (KMIP) Demonstrations

Cryptsoft, P6R, QuintessenceLabs, Semper Fortis Solutions, Thales eSecurity, and Utimaco Demo KMIP Support

2018-10-09

U.S. to Help Define New International Standard for Consumer Privacy by Design

Amazon, American Express, Apple, Axiomatics, Bank of America, BigID, Cisco, Comcast, Deloitte, DocuSign, Dropbox, Equifax, Experian, Ernst & Young, Facebook, Ford, Google, IBM, Ionic Security, JPMorgan Chase, Kaiser Permanente, KPMG, MailChimp, Mastercard, Microsoft, OneTrust, PwC, Return Path, Riot Games, Sentinel, State Street, Sumo Logic, Tesla, TransUnion, TrustArc, Uber, US NIST, Verizon, Walmart, WireWheel, and Worldpay Form US Technical Advisory Group Under ANSI and OASIS to ISO/PC 317

2018-10-02

Borderless Cyber USA 2018 Assembles Cybersecurity Experts to Explore Latest Innovations and Strategies

Anomali, EclecticIQ, IBM Security, ThreatQuotient, Fujitsu, NC4, NormShield, Sponsor Major International Cyber Event along with King & Union, New Context, sFractal, and Splunk

News by Year

Testimonials

Cybersecurity is one of the greatest challenges our modern society faces and requires a coordinated approach to succeed. Under OASIS leadership, we see an opportunity to better organize the good guys to fight cybercriminals by sharing cyber threat intelligence data in an automated and efficient data standard.

Peter Allor

Senior Security Strategist

IBM

OASIS TC members act like extra QA resources for one another. We put our products together and shake out incompatibility issues. Finding those before we ship is invaluable.

Jay Brown

Senior Software Engineer

IBM

One thing that makes OASIS stand out is its openness. It’s not just that the standards are open and freely available in perpetuity, but also that the whole process is open.

Peter Brown

Independent Consultant

As a Sponsor of the OASIS CTI Technical Committee, we are delighted to be at the forefront of advancing critically important standards like STIX, TAXII and CybOX. By creating protocols that address how to best model, analyze, and share cyber threat intelligence, we can provide greater support to overwhelmed security professionals.

John Bruce

Chairman and CEO

Resilient Systems

Soltra is proud to be a member of the OASIS CTI Technical Committee. Our threat information sharing solution, Soltra Edge, was built leveraging STIX, TAXII, and Cybox – key standards within the industry. We look forward to contributing to CTI as we continue to establish and maintain open standards, while improving cyber security capabilities and reducing workload.

Aharon Chernin

CTO

Soltra, a DTCC and FS-ISAC Company

Open standards and community sharing are vital components of a successful and effective fight against cybercrime. Our goal is to make Threat Intelligence, from a variety of sources, timely and actionable.

Dorit Dor

VP, Products

Check Point

Focusing on standardizing threat intelligence technologies to keep sensitive government and corporate information secure is paramount to the mission of OASIS and its members. At ViaSat, we take a comprehensive approach to cybersecurity, from identifying potential cyber and physical security vulnerabilities to designing and implementing a plan that leverages big data analytics, intuitive visualization and intelligent automation to keep pace with evolving threats no matter where data resides on the network or how it is accessed.

Jerry Goodwin

VP, Secure Network Systems

ViaSat

iSIGHT Partners, creator of the commercial cyber threat intelligence category, understands how security organizations can gain the advantage over adversaries by using threat intelligence across their security and risk management program. As an early contributor and enabler of STIX, we welcome the opportunity to join with OASIS to further develop CTI standards and accelerate the adoption of context rich threat intelligence.

Robert Huber

VP Community

iSight Partners

At OASIS, you don't have to be a large vendor to influence work. Of all the standards bodies we’ve participated in, OASIS is the only one we recommend with no hesitation. It is a group that simply works.

Tim Hudson

Technical Director

Cryptsoft Pty Ltd

We are proud to support the work OASIS is doing to advance their cybersecurity specifications and promote information sharing, a critical factor in today's security posture. By sharing details about malicious incidents quickly, not only between the public and private sectors, but across industry lines within the private sector as well, we can work together to better defend ourselves and stay ahead of the hackers.

Paul Kurtz

Founder and CEO

TruSTAR Technology

STIX and TAXII in particular are important initiatives towards next generation threat intelligence. Using the same terms, data streams, and threat modeling methods will help researchers, vendors, and law enforcement alike share information back and forth to stay abreast or even ahead of threat actor groups. We are pleased to contribute to this and more through OASIS.

Derek Manky

Global Security Strategist

Fortinet

We have long been committed to any advances that can better enable the sharing of threat intelligence among security professionals. Until now, organizations have been hampered by a lack of common standards and the tendency for security information to be siloed. We strongly support this important endeavor and look forward to contributing to the standardization being led by OASIS.

Paul Martini

CEO and Co-founder

iboss Cybersecurity

NEC is very pleased to be part of the CTI Technical Committee and continues to drive CTI adoption with industry partnerships to benefit customers. NEC believes that threat intelligence standards are crucial for proactively countering the cyber threat. We are excited about the formation of CTI TC and support its efforts through its contributing to and promotion of this global standard.

Kozo Matsuo

General Manager, Cyber Security Strategy Division

NEC Corporation

We have been advocates of STIX, TAXII and CybOx for some time. OASIS as an international standards checkpoint will undoubtedly improve threat intelligence sharing amongst partners by facilitating the exchange of computer-readable threat information.

David Maxwell

Director of Threat Intelligence

eSentire

OASIS strikes the right balance between the amount of structure you need for real standards and the amount of flexibility you need for cutting-edge innovation.

Drummond Reed

XDI.org

Development of an industry-wide standards framework for cyber threat intelligence is crucial for the information security industry to be able to define and share threats. New Context is a proud sponsor of OASIS and believes strongly in open and transparent standards frameworks development. We look forward to collaborating on the next standards for STIX, CybOX and TAXII.

Daniel Riedel

CEO

New Context

I always encourage vendors with products related to access control, security, or cloud computing to join the appropriate OASIS Technical Committees and contribute to the standards work. We all benefit that way.

John Tolbert

VP, Cybersecurity

Queralt

OASIS provides an auditable, transparent and justifiable process. It makes it easy for anyone to understand how the CAP-AU Profile was developed.

Greg Trott

CAP-AU Project Manager

Australia Attorney-General's Dept

OASIS members continue to amaze me by their deep knowledge of technology. I can ask a question on a TC call and get more valuable feedback in minutes than I would from spending days in a conference.

Pim van der Eijk

Owner

Sonnenglanz Consulting

OASIS gives me access to very high-level colleagues. Every TC meeting is like an intensive research seminar on a topic in our field.

Adam Wyner, Dr.

Research Associate

University of Liverpool

News

Connect with OASIS

News by Year

Testimonials