Editorial

Can a new Open Source language help the Cybersecurity sector better operate?

Open Cybersecurity Alliance debuts its proposed way to limit fragmentation – OpenDXL Ontology, which it says is a new, open way to connect Cybersecurity vendor offerings

Posted 26 February 2020 by

The Open Cybersecurity Alliance (OCA) has launched a new Open Source language framework which it says will make it easier for Cybersecurity tools to work together.

That’s in the shape of something called OpenDXL Ontology, claimed to be the “first open source language for connecting cybersecurity tools through a common messaging framework”.

In a blog post announcing the thing, which it is styling a “language framework”, the group claims that if you have a common language between cybersecurity tools and systems, you remove the need for custom integrations between products such as endpoint systems, firewalls and behaviour monitors, and so help limit “fragmentation”.

“IFf a certain tool detects a compromised device, it could automatically notify all other tools and even quarantine that device using a standard message format readable by all,” the blog goes on to say.

“While previously this was only possible with custom integrations between individual products, it will now be automatically enabled between all tools that adopt OpenDXL Ontology.”

All this work is based is on the Open Data Exchange Layer (OpenDXL), an open messaging framework created by the consortium to develop and share integrations with other tools that its says nearly 4,000 organisations are already using to improve integration work.

OCA was formed in October and is made up of 26 companies including IBM, Recorded Future, Gigamon and Tripwire.