What is Open Security
David A. Wheeler · 2013
This document provides a definition of the term “open security, ” along with some background, clarifications, and discussion. Various government projects work to enable “open security ” – but what does that term mean? This article proposes an answer, along with background, clarifications, and discussion. Proposed Definition Open security is the application of open source software (OSS) approaches to help solve cyber secu rity problems. OSS approaches collaboratively develop and maintain intellectual works (including software and documentation) by enabling users to use them for any purpose, as well as study, create, change, and redistribute them (in whole or in part). Cyber security problems are a lack of security (confidentiality, integrity, and/or availability), or potential lack of security (a vulnerability), in computer systems and/or the networks they are a part of. In short, open security improves security through collaboration. Background Modern society depends on computer systems for a myriad of functions, yet cyber security weaknesses enable attackers to subvert those computer systems. Often attackers have the advantage — attackers