openc2 — archive

OpenC2 Happening for week of 6 January 2020

From: David Lemire <[email protected]>
To: [email protected]
Date: Sun, 05 Jan 2020 22:01:00 -0000

Happy New Year, one and all! ITEM ONE: Plug Fest Update . OpenC2 will be running a plug fest / hackathon 27-28 January 2020, hosted by US Cyber Command in their public, unclassified DreamPort facility in Columbia, MD . TC members are encouraged to consider participation in this event. Further details and registration information can be found at DreamPort: https://dreamport.tech/event-open-c2-plug-fest-01272820.php IF YOU (even think you might) PLAN TO ATTEND THE PLUG FEST PLEASE REGISTER! A series of three plug fest preparation meetings have been scheduled, of which two have been completed. The remaining call takes place Thursday, January 16th at 1:00 PM EST. If you wish to participate and need an invitation please contact the Secretary or any of the TC or SC co-chairs. If you believe there would be benefit in additional coordination meetings, please myself or Joe Brule (TC co-chair). Information related to the plug fest is being accumulated into pages in the TC's use cases repo; please look at https://github.com/oasis-tcs/openc2-usecases/tree/master/Cybercom-Plugfest and make contributions and corrections to improve the overall value of this resource. A Tech Talk was conducted at DreamPort on Tuesday, 5 November, providing information about OpenC2 and our plans for the plug fest to about 35 people. Slides from the event have been posted; links to the presentations are on the GH page above (in section 6) OASIS has created a new mail list for the plug fest which is open to interested parties regardless of OASIS or TC membership. If you are interested in participating on that mailing list, please let the Secretary know your preferred email to use. The list address is [email protected] A Slack channel has also been established to help with plug fest coordination: # plug-fest-prep https://openc2-community.slack.com/messages/CNW18R2NR , however since that channel is limited to plug fest participants who are also TC members, the mail list is the preferred coordination mechanism. Six Key Points: 1) The goal of the Plug Fest is to execute use cases using OpenC2 and gather lessons learned about interoperability. 2) The Plug Fest is not a venue for the development of OpenC2 specifications. 3) The Plug Fest is open to interested participants, regardless of whether they are OASIS members. 4) The Plug Fest is open to all. The DreamPort facility and the Plug Fest are unclassified, and there is no restriction to U.S. organizations or individuals. 5) The plugfest aspect is for testing interworking of existing OpenC2 implementations. Let us know what you have and we will work your implementation into the test plans. 6) The hackathon aspect is for improving the interworking of existing OpenC2 implementations, extending existing implementations (e.g., the many OpenC2 open source projects), and/or creating new implementations of OpenC2. ITEM TWO: Google Cloud Platform. A Google representative has arranged to provide Google Cloud Platform (GCP) resources to support the Plug Fest. A session to introduce people to the basics of using GCP was held on 5 December at DreamPort. Details on how to take advantage of the GCP resources were emailed to the plug fest mail list on 30 December 2019. ITEM THREE: Language SC Co-chair. To-date no nominations have been received for the position of Language SC co-chair. Please contact either of the TC co-chairs to nominate a candidate or discuss your interest in the co-chair position . ITEM FOUR: A call for post 1.0 Participation. Version 1.0 of the specifications have been posted, approved and announced, so let's move forward. Do you have a product or service that's a candidate for producing / consuming OpenC2 commands and responses? Please consider sharing your Custom Actuator Profile or Proposed Committee specification. Please contact the AP-SC co-chairs (Alex Everett and Dave Kemp). HTTPS is ubiquitous, but is there a message fabric that is more suitable for your cyber-ecosystem? Please consider sharing your proposed key management, transport solutions and other implementation considerations with the IC-SC co-chairs (Dave Lemire and Michelle Barry) Do you need OpenC2 to do more? Do you have a use case or scenario that we have not considered? Please share you use cases with the L-SC co-chairs (Toby Considine [and a player-to-be-named-later]) Meetings This Week: Language SC Meeting Monday, 6 Jan 2020 at 2 PM EST https://meet.lucidmeetings.com/meeting/234637 Implementation Considerations SC Meeting Wednesday, 8 Jan 2020 at 1 PM EST https://meet.lucidmeetings.com/meeting/228847 Sent on behalf of the TC Co-Chairs, Dave -- David P. Lemire , CISSP HII Mission Driven Innovative Solutions ( HII-MDIS ) Technical Solutions (A Division of Huntington Ingalls Industries) OpenC2 Technical Committee Secretary OpenC2 Implementation Considerations SC Co-chair Contractor support to NSA Email: [email protected] Work (301) 575-5190 Mobile ( 240) 938-9350 Reply Forward