Source: http://csrc.nist.gov/scrm/ssca/documents/Fall_2016_Presentations/Tue_AM_1_What_OSS_Is_and_Is_Not_Andy_Murren.pdf