Welcome!

Weblogic Authors: Elizabeth White, Michael Meiner, Michael Bushong, Avi Rosenthal

News Feed Item

Fourteen Companies Demonstrate Support for KMIP and XACML OASIS Standards at RSA Conference

Support for two of the most widely adopted security standards from the OASIS international consortium are showcased at the RSA Conference in Booth 3012 this week. The Key Management Interoperability Protocol (KMIP) and the eXtensible Access Control Markup Language (XACML) OASIS Standards are being featured in two separate demonstrations involving fourteen companies. These organizations provide solutions that offer implementers a range of products backed by the assurance of interoperability over time.

KMIP Interop

Interoperable communication between key management clients and key management servers is the focus of the KMIP demonstration. Clients from Cryptsoft, IBM, Quintessence Labs, and Thales e-Security communicate with key management servers from Cryptsoft, HP, IBM, Quintessence Labs, Thales e-Security, Townsend Security and Vormetric. Together, the clients and servers demonstrate the full key management life-cycle including creating, registering, locating, retrieving, deleting, and transferring symmetric and asymmetric keys and certificates between vendor systems. Support for multiple versions of KMIP is being demonstrated, including the new KMIP 1.1 OASIS Standard, as well as KMIP 1.0 and KMIP 1.2 (currently under development).

XACML Interop

The XACML demonstration shows how access control can be managed in large-scale environments where resources are distributed and policy administration is federated. Axiomatics, Boeing, Dell, Forgerock, NextLabs, Oracle, and ViewDS show implementations of the XACML Intellectual Property Control, Export Control-US, JSON and REST Profiles. These profiles enable organizations to control the usage and distribution of data according to resource properties such as Copyright, Trademark, Proprietary, Export Control Classifications, and licensing authorities, while using the latest communication protocols across various platforms and applications. During the showcase, resource attributes are obtained directly from metadata in the data objects themselves and travel with the data objects.

Support for KMIP Interop

Cryptsoft
“OASIS KMIP delivers--2010 saw KMIP products in development, 2011 brought products from the early adopters, 2012 showed us deployed interoperability via KMIP was a reality, and in 2013 we’re now seeing widespread industry adoption. As one of the most widely used OEM suppliers of KMIP technology, Cryptsoft is committed to enabling industry adoption of KMIP. Our SDKs and adaptors enable our clients to both embrace KMIP and support existing non-KMIP solutions.”
-- Tim Hudson, Chief Security Architect

Thales e-Security
“Participants in the OASIS interoperability booth are demonstrating their commitment to the KMIP standard, and Thales is delighted to showcase keyAuthority, its own high assurance key manager. These types of events give customers confidence to develop their own key management strategies and act as a catalyst for the enterprise key management market.”
-- Bob Lockhart, Chief Solutions Architect Key Management, Thales e-Security

Vormetric
"We are delighted to be demonstrating interoperable key management in the OASIS booth at RSA Conference. KMIP is gaining rapid adoption as the industry standard protocol for key management between an encryption client and a key management server, and Vormetric is pleased to take part in this interoperability effort."
-- Ashvin Kamaraju, VP of Product Development, Vormetric

Support for XACML Interop

Axiomatics
“As Axiomatics provides editorial support for XACML 3.0, we’re very happy to see OASIS organizing this interop to demonstrate some of the latest features of XACML 3.0 including the new JSON and REST profiles. The JSON and REST profiles will make XACML-driven authorization available to a broader developer audience that prefer lighter weight encoding and transport formats.”
-- Gerry Gebel, President Axiomatics Americas

Boeing
“Protecting intellectual property and properly authorizing access to export-controlled data are key concerns for enterprise computing security organizations. Our EC-US and IPC profiles provide standardized attribute names/values for creating access control policies. Utilization of metadata as resource attributes affords enhanced mechanisms for IP protection and export control enforcement. Our product, CIPHER, scans files and tags them with EC-US and IPC metadata, which can then be evaluated by XACML PDPs at runtime.”
-- John Tolbert, Security Strategist, The Boeing Company

Oracle
“Oracle’s Cloud, Enterprise Applications and Oracle Fusion Middleware technologies rely on Oracle Entitlements Server, our XACML-based authorization solution, making it easier to manage identity in today’s social, mobile and cloud environments. Oracle’s complete platform approach to identity management is entirely standards-based. We are committed to open standards and interoperability because we believe it is the only scalable and sustainable approach to identity.”
-- Marc Boroditsky, vice president of Identity Management, Oracle

Additional information:

OASIS KMIP Technical Committee
http://www.oasis-open.org/committees/kmip/

OASIS XACML Technical Committee
http://www.oasis-open.org/committees/xacml/

About OASIS:

OASIS (Organization for the Advancement of Structured Information Standards) is a not-for-profit, international consortium that drives the development, convergence and adoption of open standards for the global information society. OASIS promotes industry consensus and produces worldwide standards for security, cloud computing, Web services, the Smart Grid, content technologies, business transactions, emergency management, and other applications. OASIS open standards offer the potential to lower cost, stimulate innovation, grow global markets, and protect the right of free choice of technology. OASIS members broadly represent the marketplace of public and private sector technology leaders, users, and influencers. The consortium has more than 5,000 participants representing over 600 organizations and individual members in 100 countries.

http://www.oasis-open.org

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

@ThingsExpo Stories
"Matrix is an ambitious open standard and implementation that's set up to break down the fragmentation problems that exist in IP messaging and VoIP communication," explained John Woolf, Technical Evangelist at Matrix, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Web Real-Time Communication APIs have quickly revolutionized what browsers are capable of. In addition to video and audio streams, we can now bi-directionally send arbitrary data over WebRTC's PeerConnection Data Channels. With the advent of Progressive Web Apps and new hardware APIs such as WebBluetooh and WebUSB, we can finally enable users to stitch together the Internet of Things directly from their browsers while communicating privately and securely in a decentralized way.
"A lot of times people will come to us and have a very diverse set of requirements or very customized need and we'll help them to implement it in a fashion that you can't just buy off of the shelf," explained Nick Rose, CTO of Enzu, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York City, NY.
SYS-CON Events announced today that CA Technologies has been named “Platinum Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CA Technologies helps customers succeed in a future where every business – from apparel to energy – is being rewritten by software. From ...
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm.
You think you know what’s in your data. But do you? Most organizations are now aware of the business intelligence represented by their data. Data science stands to take this to a level you never thought of – literally. The techniques of data science, when used with the capabilities of Big Data technologies, can make connections you had not yet imagined, helping you discover new insights and ask new questions of your data. In his session at @ThingsExpo, Sarbjit Sarkaria, data science team lead ...
The Internet of Things will challenge the status quo of how IT and development organizations operate. Or will it? Certainly the fog layer of IoT requires special insights about data ontology, security and transactional integrity. But the developmental challenges are the same: People, Process and Platform and how we integrate our thinking to solve complicated problems. In his session at 19th Cloud Expo, Craig Sproule, CEO of Metavine, demonstrated how to move beyond today's coding paradigm and sh...
Big Data, cloud, analytics, contextual information, wearable tech, sensors, mobility, and WebRTC: together, these advances have created a perfect storm of technologies that are disrupting and transforming classic communications models and ecosystems. In his session at @ThingsExpo, Erik Perotti, Senior Manager of New Ventures on Plantronics’ Innovation team, provided an overview of this technological shift, including associated business and consumer communications impacts, and opportunities it m...
WebRTC is about the data channel as much as about video and audio conferencing. However, basically all commercial WebRTC applications have been built with a focus on audio and video. The handling of “data” has been limited to text chat and file download – all other data sharing seems to end with screensharing. What is holding back a more intensive use of peer-to-peer data? In her session at @ThingsExpo, Dr Silvia Pfeiffer, WebRTC Applications Team Lead at National ICT Australia, looked at differ...
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place June 6-8, 2017, at the Javits Center in New York City, New York, is co-located with 20th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry p...
SYS-CON Events announced today that IoT Now has been named “Media Sponsor” of SYS-CON's 20th International Cloud Expo, which will take place on June 6–8, 2017, at the Javits Center in New York City, NY. IoT Now explores the evolving opportunities and challenges facing CSPs, and it passes on some lessons learned from those who have taken the first steps in next-gen IoT services.
The Internet of Things can drive efficiency for airlines and airports. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Sudip Majumder, senior director of development at Oracle, discussed the technical details of the connected airline baggage and related social media solutions. These IoT applications will enhance travelers' journey experience and drive efficiency for the airlines and the airports.
SYS-CON Events announced today that WineSOFT will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Based in Seoul and Irvine, WineSOFT is an innovative software house focusing on internet infrastructure solutions. The venture started as a bootstrap start-up in 2010 by focusing on making the internet faster and more powerful. WineSOFT’s knowledge is based on the expertise of TCP/IP, VPN, SSL, peer-to-peer, mob...
A strange thing is happening along the way to the Internet of Things, namely far too many devices to work with and manage. It has become clear that we'll need much higher efficiency user experiences that can allow us to more easily and scalably work with the thousands of devices that will soon be in each of our lives. Enter the conversational interface revolution, combining bots we can literally talk with, gesture to, and even direct with our thoughts, with embedded artificial intelligence, whic...
WebRTC sits at the intersection between VoIP and the Web. As such, it poses some interesting challenges for those developing services on top of it, but also for those who need to test and monitor these services. In his session at WebRTC Summit, Tsahi Levent-Levi, co-founder of testRTC, reviewed the various challenges posed by WebRTC when it comes to testing and monitoring and on ways to overcome them.
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settle...
In his session at @ThingsExpo, Steve Wilkes, CTO and founder of Striim, will delve into four enterprise-scale, business-critical case studies where streaming analytics serves as the key to enabling real-time data integration and right-time insights in hybrid cloud, IoT, and fog computing environments. As part of this discussion, he will also present a demo based on its partnership with Fujitsu, highlighting their technologies in a healthcare IoT use-case. The demo showcases the tracking of patie...
The explosion of new web/cloud/IoT-based applications and the data they generate are transforming our world right before our eyes. In this rush to adopt these new technologies, organizations are often ignoring fundamental questions concerning who owns the data and failing to ask for permission to conduct invasive surveillance of their customers. Organizations that are not transparent about how their systems gather data telemetry without offering shared data ownership risk product rejection, regu...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
SYS-CON Events announced today that Cloud Academy will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Cloud Academy is the industry’s most innovative, vendor-neutral cloud technology training platform. Cloud Academy provides continuous learning solutions for individuals and enterprise teams for Amazon Web Services, Microsoft Azure, Google Cloud Platform, and the most popular cloud computing technologies. Ge...