Open security
From Wikipedia, the free encyclopedia
 |
This article needs additional citations for verification. (June 2011) |
Open security is an initiative to approach application security challenges using open source philosophies and methodologies. Traditional application security is based on the premise that any application or service (whether it is malware or desirable) relies on security through obscurity.[1]
On the developer side, legitimate software and service providers can have independent verification and testing of their source code.[2] On the information technology side, companies can aggregate common threats, patterns, and security solutions to a variety of security issues.[3][4]
See also [edit]
- Kerckhoffs's Principle
- OASIS (organization) (Organization for the Advancement of Structured Information Standards)
- OWASP (Open Web Application Security Project)
- Open government
- Homeland Open Security Technology
References [edit]
- ^ Raymond, Eric S (2004-05-17). "If Cisco ignored Kerckhoffs's Law, users will pay the price". LWN.net. Retrieved 2011-06-21.
- ^ "Open Security Foundation". Open Security Foundation. Retrieved 2011-06-21.
- ^ "Open Web Application Security Project". Retrieved 2011-06-21.
- ^ "Why have OSA?". OSA. Retrieved 2011-06-21.
