Security
Standards in the catalog that belong to security — 9 of them. A standard is listed here only when it is specific to this industry; the general-purpose ones it also relies on, like HTTP, OAuth and JSON Schema, deliberately carry no domain.
The same industry, as data models
16 data models define what information exists in security, as opposed to the standards applied in API operations listed below. Same industry, two lenses.
See the security data models →| Standard | What it is |
|---|---|
| CycloneDX | CycloneDX is an OWASP-stewarded standard for software, hardware, and machine-learning bills of materials (SBOM). It provides a structured inventory... |
| EMILIA Protocol | EMILIA Protocol is a pair of individual IETF drafts and an open-source gate for checking an agent's authority before a protected tool runs, keeping... |
| ISA/IEC 62443 | ISA/IEC 62443 is the series of standards for securing industrial automation and control systems, developed by the ISA99 committee and adopted by th... |
| JOSE | JOSE is the IETF family of specifications for signing, encrypting and carrying claims as JSON — the framework JSON Web Tokens come from. It defines... |
| OSV Schema | The OSV Schema is an OpenSSF JSON format for describing open-source vulnerabilities, with precise affected-version ranges expressed against package... |
| OpenID AuthZEN | The OpenID Foundation's AuthZEN working group standardizes how applications ask a policy decision point for an authorization decision. Two working-... |
| SPDX | SPDX (Software Package Data Exchange) is an open, ISO/IEC 5962 standard for communicating software bill-of-materials information, including compone... |
| W3C DID Resolution | DID Resolution defines how a decentralized identifier is resolved to its DID document, and how DID URLs are dereferenced, including the product-lev... |
| Web Bot Auth | Web Bot Auth is an IETF working group, and the specifications it produces, for bots and agents to cryptographically identify themselves to websites... |