Open security
 | This article needs additional citations for verification. (June 2011) |
Open security is an initiative to approach application security challenges using open source philosophies and methodologies.[1] Traditional application security is based on the premise that any application or service (whether it is malware or desirable) relies on security through obscurity.[2]
On the developer side, legitimate software and service providers can have independent verification and testing of their source code.[3] On the information technology side, companies can aggregate common threats, patterns, and security solutions to a variety of security issues.[4][5]
See also
- Kerckhoffs's Principle
- OASIS (organization) (Organization for the Advancement of Structured Information Standards)
- OWASP (Open Web Application Security Project)
- Open government
- Homeland Open Security Technology
References
- ^ "Open Security". Retrieved 2013-08-28.
- ^ Raymond, Eric S (2004-05-17). "If Cisco ignored Kerckhoffs's Law, users will pay the price". LWN.net. Retrieved 2011-06-21.
- ^ "Open Security Foundation". Open Security Foundation. Retrieved 2011-06-21.
- ^ "Open Web Application Security Project". Retrieved 2011-06-21.
- ^ "Why have OSA?". OSA. Retrieved 2011-06-21.