The OASIS standards consortium has formed a new committee to look at security in the cloud. OASIS Identity in the Cloud (IDCloud) Technical Committee was formed to address the growing difficulties the cloud computing systems are facing in terms of secure identity management.
The committee will focus on finding improvements to the existing identity management standards and investigate the need for those profiles to work cohesively together under those standards.
By conducting risk and threat analysis on a collection of use case scenarios, the committee aims to put forth a set of guidelines that will work to combat identity theft vulnerabilities. These policies will then hopefully be enforced along multiple domains.
Committee members include Alfresco, CA, Capgemini, Cisco, Cognizant, Boeing, eBay, IBM, Microsoft, Novell, Ping Identity, Red Hat, SafeNet, SAP, Skyworth TTG, Symantec, Vanguard, VeriSign and others. Additionally Microsoft and Red Hat are co-chairing the effort.