CTI TC Interoperability Sub-Committee Kick-Off Meeting February 10, 2016 David Eilken, Chair Patrick Maroney, Chair Jane Ginn, Secretary

Agenda – First Order of Business n Nomination of Jane Ginn as Interoperability SC Secretary

Agenda n Review Interoperability SC Charter n Interoperability Sub-Committee Objectives, Skills, & Availability n Vendor/Community Interoperability Matrix/Wiki n Interop demo or a product showcase at RSA 2017 n OASIS KMIP TC Interoperability SC Liaison n Test Data Set Initiative Straw Man n Open Discussion n Identify/Prioritize Near-Term Objectives

Statement of Purpose The Interoperability SC will help guide adherence to CTI TC-promulgated standards and interoperability between CTI TC standards-based implementations, while encouraging standards maturity throughout the industry. The SC will develop parameters and processes to allow CTI TC members to test/ validate, and where possible measure the maturity of another organization’s implementation. Testing parameters and processes should be straight-forward and objective to provide clear confirmation that minimum standards' requirements have been achieved. Initially, in regard to maturity measurement efforts, the SC will develop guidelines to support a more qualitative review of an implementation. In addition, the SC will identify opportunities and approaches to promoting interoperability with externally-defined cyber threat intelligence standards and frameworks. Deliverables Documents addressing guidelines, parameters and processes for testing, validating and measuring implementations' adherence to CTI standards Proposals for promoting interoperability with other, externally-defined cyber threat intelligence standards and frameworks

Agenda n Interoperability Sub-Committee Objectives, Skills, & Availability

Roster Blue Coat Systems, Inc. Center for Internet Security (CIS) Cisco Systems Cyber Threat Intelligence Network, Inc. (CTIN) DHS Office of Cybersecurity and Communications (CS&C) DTCC EclecticIQ Financial Services Information Sharing and Analysis Center (FS-ISAC) Georgetown University IBM Individual Integrated Networking Technologies, Inc. iSIGHT Partners, Inc. Johns Hopkins University Applied Physics Laboratory LookingGlass Cyber Solutions Mitre Corporation NEC Corporation OASIS Object Management Group Soltra Splunk Inc. United Kingdom Cabinet Office VeriSign

Agenda n Vendor/Community Interoperability Matrix/Wiki

Interoperability Matrix

Interop demo at RSA 2017 The CTI TC has the option to host an Interop demo at RSA 2017 in San Francisco. In order to secure a premium booth space for that event, we need confirmation from the TC by 29 Feb 2016 and commitment from at least four TC members by 31 Mar. If your company would like to secure demo space in the OASIS booth at RSA 2017, please review and respond to the sign-up information packet that will be distributed later this month. (More information is included below.) Background For past 12 years, OASIS has successfully organized an Interoperability Showcase at the US RSA expo. This year’s showcase features 12 member companies in a 20x20 booth demonstrating interoperability for the OASIS KMIP and PKCS #11 standards. Members share the space and associated expenses. (Please be sure to stop by, if you’re planning to be at RSA – booth #821.) RSA 2017 Next year, RSA will be held on Feb. OASIS will select our 2017 space on 1 Mar (Booth space sells out fast and early.) In order to accommodate a CTI Interop (in addition to KMIP and PKCS demos), OASIS is planning to select a 20x30 booth space. So, what’s involved from the TC at this point? By 29 Feb, the CTI TC needs to confirm it will endorse either an Interop demo or a product showcase at RSA (For a description of each activity, please refer to the OASIS Interop Policy. Later, the TC will need to designate an Interop lead to coordinate the activity with OASIS staff. Once TC commitment has been received, OASIS will start the member sign-up process. Below are some details highlighting what’s involved in that process. Please review and let us know if you have any questions. We will be available on next week’s CTI marketing group call (Friday, 12 Feb) – to field any questions. We would also be happy to arrange additional meetings, if needed.

Agenda n OASIS KMIP TC Interoperability SC Liaison “Getting in touch with the Chairs is the right course to take. Tony Cox is our Interop lead for both PKCS #11 and KMIP -- so he has a really great feel for how things are planned out etc. Bob Griffin (from RSA) has also been instrumental in a lot of the prep work. I believe Bob suggested a liaison during a recent marketing call. “

Agenda n Test Data Set Initiative Straw Man

Agenda n Open Discussion

Agenda n Identify/Prioritize Near-Term Objectives