OCA Community Connect

Welcome to another fascinating episode of OCA Community Connect! In this installment, our host, Roseann Guttierrez, engages in an insightful conversation with Kenneth Peeples, a principal cybersecurity architect at Red Hat, to unravel the ins and outs of the cutting-edge Kestrel as a Service (KaaS) project. As Kenneth shares the nitty-gritty details of KaaS, he paints a vivid picture of a platform designed for crowd hunting and threat collaboration, with a focus on enhancing the speed of detecting cyber threats. Delving deeper, he opens up about the personal significance of the project, tying it back to his profound passion for security and the inspiration he draws from his parents. Moreover, he sheds light on the vital role of community involvement in propelling the Kestrel as a Service platform forward, emphasizing the need for collaboration and contributions. Through this engaging conversation, we gain invaluable insights into the complexities and potential of Kestrel as a Service, as well as the pivotal role of open source collaboration in the dynamic landscape of cybersecurity. So, tune in and join us on this illuminating journey through the world of Kestrel as a Service!

Reference Links:

Open Cybersecurity Alliance (OCA) website:
https://opencybersecurityalliance.org/

Open Cybersecurity Alliance (OCA) GitHub
https://github.com/opencybersecurityalliance

Open Cybersecurity Alliance (OCA) YouTube
https://www.youtube.com/channel/UCjTpPl2oEGH_Ws251m827Cg

Share Your Ideas & Guest Suggestions!

Got a topic or an expert in mind for "OCA Community Connect"? We’re always on the lookout for fresh insights and voices in cybersecurity and open-source innovation.

How to Contribute:

Topics: Tell us what you’re curious about in the cybersecurity world.
Guests: Know someone who’d be a great interview? We’d love to hear about them.

Reach Out: Drop us an email or message us on social media. Your suggestions help shape our show, and we can’t wait to hear from you!

Welcome back to OCA Community Connect, your source for all things related to the Open Cybersecurity Alliance. In today's episode, we have the pleasure of speaking with Vasilios Mavroeidis, a cybersecurity professor at the University of Oslo and a member of the OCA governing board. So, join us as Vasilios Mavroeidis shares his expertise and insights into the world of cybersecurity standards, offering a compelling look into the innovative CACAO roaster subproject and its potential to shape the future of cybersecurity operations.

This project aims to expand on the CACAO standard by providing an application that enables defenders to effectively design, sign, exchange and utilize playbooks. Vasilios advocates for the importance of this subproject, highlighting its potential to enhance the capacity of security operation centers, particularly for national security authorities and operators of essential services.

Throughout our conversation, Vasilios emphasizes the significance of community involvement in the project's development. He expresses the need for contributions from the wider cybersecurity community to improve the project, expand its capabilities, and create a valuable knowledge base of playbooks. Vasilios also delves into the potential for automation and the broad impact that the CACAO standard and in turn, the Roaster subproject could have on the field of cybersecurity.

- -

**Episode Specific References**

OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Security
https://groups.oasis-open.org/communities/tc-community-home2?CommunityKey=b75cccb8-adc6-4de5-8b99-018dc7d322b6

Reference Links:

Open Cybersecurity Alliance (OCA) website:
https://opencybersecurityalliance.org/

Open Cybersecurity Alliance (OCA) GitHub
https://github.com/opencybersecurityalliance

Open Cybersecurity Alliance (OCA) YouTube
https://www.youtube.com/channel/UCjTpPl2oEGH_Ws251m827Cg

Share Your Ideas & Guest Suggestions!

Got a topic or an expert in mind for "OCA Community Connect"? We’re always on the lookout for fresh insights and voices in cybersecurity and open-source innovation.

How to Contribute:

Topics: Tell us what you’re curious about in the cybersecurity world.
Guests: Know someone who’d be a great interview? We’d love to hear about them.

Reach Out: Drop us an email or message us on social media. Your suggestions help shape our show, and we can’t wait to hear from you!

Welcome back to another insightful episode of OCA Community Connect. Today, our host Roseann Guttierrez engages in a compelling conversation with Mark Mastrangeli, the cloud engagement director at Palo Alto Networks and co-chair of the OCA Project Governing Board (PGB). Mark shares his remarkable journey into the tech industry and the pivotal role he plays in advocating for collaboration and interoperability in the cybersecurity domain.

In this episode, Mark deep dives into the significant achievements of OCA in 2023. He sheds light on the launch of two projects - the Open XDR architecture and the Indicator of Behavior project, both aimed at driving innovation and enhancing cyber defense capabilities. Furthermore, Mark underscores the successful launch of the CACAO Roaster playbook editor, a project that promises to simplify the creation of playbooks for organizations.

Looking ahead to 2024, Mark unveils OCA's vision to expand its reach and bring different cybersecurity communities together. He emphasizes the mission to develop more inclusive and accessible solutions by fostering collaboration and interoperability. As the community aims to serve as an ecosystem of ecosystems, this episode gives a glimpse into the future of cybersecurity and the pivotal role that OCA is set to play in shaping it.

- -

**Episode Specific References**

MITRE Security Automation Framework (SAF)
https://saf.mitre.org/

Open Cybersecurity Schema Framework (OCSF)
https://docs.aws.amazon.com/security-lake/latest/userguide/open-cybersecurity-schema-framework.html

Vulnerability Exploitability eXchange (VEX)
https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex

Borderless Cyber - OAISIS Open
https://borderlesscyber2023.oasis-open.org/

- -

Reference Links:

Open Cybersecurity Alliance (OCA) website:
https://opencybersecurityalliance.org/

Open Cybersecurity Alliance (OCA) GitHub
https://github.com/opencybersecurityalliance

Open Cybersecurity Alliance (OCA) YouTube
https://www.youtube.com/channel/UCjTpPl2oEGH_Ws251m827Cg

Share Your Ideas & Guest Suggestions!

Got a topic or an expert in mind for "OCA Community Connect"? We’re always on the lookout for fresh insights and voices in cybersecurity and open-source innovation.

How to Contribute:

Topics: Tell us what you’re curious about in the cybersecurity world.
Guests: Know someone who’d be a great interview? We’d love to hear about them.

Reach Out: Drop us an email or message us on social media. Your suggestions help shape our show, and we can’t wait to hear from you!

In this episode of OCA Community Connect, we delve into the world of Open XDR Architecture (OXA) with our guest, David Bizeul, the co-founder and chief scientific officer of Sequoia IO. David provides an in-depth look at OXA, its significance, and the impact it has on the cybersecurity community. He emphasizes the importance of preserving expert resources, placing technology ownership on vendors, and raising the bar against attacks using CTI dissemination. Join us as we explore the potential of Open XDR Architecture and how the community's involvement is crucial for its success. Listen in for an engaging discussion and the various opportunities for participation and contribution.

*** NOTE: This episode had slides related to the discussion that can be found on this link ***

Reference Links:

Open Cybersecurity Alliance (OCA) website:
https://opencybersecurityalliance.org/

Open Cybersecurity Alliance (OCA) GitHub
https://github.com/opencybersecurityalliance

Open Cybersecurity Alliance (OCA) YouTube
https://www.youtube.com/channel/UCjTpPl2oEGH_Ws251m827Cg

Share Your Ideas & Guest Suggestions!

Got a topic or an expert in mind for "OCA Community Connect"? We’re always on the lookout for fresh insights and voices in cybersecurity and open-source innovation.

How to Contribute:

Topics: Tell us what you’re curious about in the cybersecurity world.
Guests: Know someone who’d be a great interview? We’d love to hear about them.

Reach Out: Drop us an email or message us on social media. Your suggestions help shape our show, and we can’t wait to hear from you!

In this episode of OCA Community Connect, we have the pleasure of welcoming Duncan Sparrell, chief cyber curmudgeon of sFractal Consulting LLC, and OASIS Board member. Duncan gives us a glimpse into the Cybersecurity Automation Sub-Project (CASP) and also shares information on the recent cybersecurity automation village event, providing highlights and detailing the scenarios that were addressed and discussed. He emphasizes the importance of automation in kicking hackers out of systems quickly. The conversation concludes with a discussion on upcoming events, including a meet-up at the borderless cyber event in London and a two-day event planned for early 2024.

The next CASP event will be a 2-day Cybersecurity Automation Village in Virginia in April,2024. For more info, see Next Village and participate in the CASP mailing list.

Reference Links:

Open Cybersecurity Alliance (OCA) website:
https://opencybersecurityalliance.org/

Open Cybersecurity Alliance (OCA) GitHub
https://github.com/opencybersecurityalliance

Open Cybersecurity Alliance (OCA) YouTube
https://www.youtube.com/channel/UCjTpPl2oEGH_Ws251m827Cg

Share Your Ideas & Guest Suggestions!

Got a topic or an expert in mind for "OCA Community Connect"? We’re always on the lookout for fresh insights and voices in cybersecurity and open-source innovation.

How to Contribute:

Topics: Tell us what you’re curious about in the cybersecurity world.
Guests: Know someone who’d be a great interview? We’d love to hear about them.

Reach Out: Drop us an email or message us on social media. Your suggestions help shape our show, and we can’t wait to hear from you!