OASIS Common Security Advisory Framework (CSAF) TC

 View Only
  • 1.  Upcoming OCA CASP Plugfest

    Posted 01-31-2024 22:23
    CASP: During the call earlier today I brought up the subject of the upcoming Plugfest to be held in the greater Washington, D.C. area on April 11th & 12th. The Open Cybersecurity Alliance (OCA) Cybersecurity Automation Subproject (CASP) is organizing the event for demonstrating interoperability between and among many of the OASIS Open technical committee standards, along with several of the OCA subprojects. Here is more information and a Registration link that has been developed by Jane Harnad of OASIS staff. We're excited to announce that registration is now open < https://www.eventbrite.com/e/cybersecurity-automation-village-registration-796037719247 > for the upcoming Cybersecurity Automation Village Plugfest! This hybrid event is scheduled for April 11-12, 2024, with an optional setup-testing day on April 10th, at the Peraton Offices, 1875 Explorer St, Reston, VA 20190. Event Details: - No charge for both in-person and virtual attendance. - In-person spots are limited, with priority for those with the highest sweat equity. - One person per organization for in-person participation. Secure your spot by registering here < https://www.eventbrite.com/e/cybersecurity-automation-village-registration-796037719247 > . Special Thanks to Our Sponsors: A big thank you to Peraton for hosting the physical segment, including Happy Hour on Thursday evening, and Cyware, our lunch sponsor. Additional Planning Session: In addition to our biweekly CASP meetings, we've added an extra planning session every Friday at 1:00 EST. Check the CASP calendar < https://lists.oasis-open-projects.org/g/oca-casp/calendar > for details, and everyone is invited to join. Stay Connected: - Join the #casp channel on OCA Slack < https://open-cybersecurity.slack.com/join/shared_invite/zt-17l2stcly-HIpPHd4zx5u9qA2f7TmV3Q#/shared-invite/email > . - Visit the CASP GitHub site < https://github.com/opencybersecurityalliance/casp >. - Encourage participation in vendor "Interoperability Validation" prep session. A prep session for vendors is coming soon. Details will be forward to this CASP mailing list. Your active participation and valuable input are instrumental in shaping a productive and engaging event. ********************************************** Best regards, Jane Ginn, MSIA Secretary OCA CASP


  • 2.  Re: [csaf] Upcoming OCA CASP Plugfest

    Posted 02-01-2024 14:21
    Following on what Jane said, the VEX CSAF profile could play a role in the value proposition use case at   https://github.com/opencybersecurityalliance/casp/blob/main/Plugfests/2024-03-NorthernVirginia/UseCases/ValuePropositions/WitchyWashy/README.md . Or we could others if people have suggestions.   Ideally some people from CSAF TC could give some examples of “practitioner” use cases (ie more details than the high level value propositions which are more intended to show the value to business types) and some actual CSAF examples. If anyone is interested, please attend the CASP planning sessions or at least let me know and I’ll help get CSAF participation noted. I expect some of the competing VEX formats to also be there.   Duncan Sparrell   --  Duncan Sparrell sFractal Consulting iPhone, iTypo, iApologize I welcome VSRE emails. Learn more at  http://vsre.info /     From: csaf@lists.oasis-open.org <csaf@lists.oasis-open.org> on behalf of Ms. Jane Ginn <jg@ctin.us> Sent: Wednesday, January 31, 2024 5:23:25 PM To: csaf@lists.oasis-open.org <csaf@lists.oasis-open.org> Subject: [csaf] Upcoming OCA CASP Plugfest   CASP: During the call earlier today I brought up the subject of the upcoming Plugfest to be held in the greater Washington, D.C. area on April 11th & 12th.  The Open Cybersecurity Alliance (OCA) Cybersecurity Automation Subproject (CASP) is organizing the event for demonstrating interoperability between and among many of the OASIS Open technical committee standards, along with several of the OCA subprojects.  Here is more information and a Registration link that has been developed by Jane Harnad of OASIS staff. We're excited to announce that registration is now open < https://www.eventbrite.com/e/cybersecurity-automation-village-registration-796037719247 > for the upcoming Cybersecurity Automation Village Plugfest! This hybrid event is scheduled for April 11-12, 2024, with an optional setup-testing day on April 10th, at the Peraton Offices, 1875 Explorer St, Reston, VA 20190. Event Details:    - No charge for both in-person and virtual attendance.    - In-person spots are limited, with priority for those with the highest    sweat equity.    - One person per organization for in-person participation. Secure your    spot by registering here    < https://www.eventbrite.com/e/cybersecurity-automation-village-registration-796037719247 >    . Special Thanks to Our Sponsors: A big thank you to Peraton for hosting the physical segment, including Happy Hour on Thursday evening, and Cyware, our lunch sponsor. Additional Planning Session: In addition to our biweekly CASP meetings, we've added an extra planning session every Friday at 1:00 EST. Check the CASP calendar < https://lists.oasis-open-projects.org/g/oca-casp/calendar > for details, and everyone is invited to join. Stay Connected:    - Join the #casp channel on OCA Slack    < https://open-cybersecurity.slack.com/join/shared_invite/zt-17l2stcly-HIpPHd4zx5u9qA2f7TmV3Q#/shared-invite/email >    .    - Visit the CASP GitHub site    < https://github.com/opencybersecurityalliance/casp >.    - Encourage participation in vendor "Interoperability Validation" prep    session. A prep session for vendors is coming soon. Details will be forward    to this CASP mailing list. Your active participation and valuable input are instrumental in shaping a productive and engaging event. ********************************************** Best regards, Jane Ginn, MSIA Secretary OCA CASP