EGI CSIRT team monthly meeting

Tuesday 21 Dec 2010, 14:30 → 15:30 Europe/Amsterdam

EVO - EGI CSIRT meeting

Mingchao Ma (STFC - RAL)

A monthly team meeting to discuss team activities and issues It will be on EVO (http://evo.caltech.edu/evoGate/). Meeting can be found in Universe community, please search EVO meeting with keyword "EGI CSIRT" Access information can be found at: https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting EVO Phone Bridge Telephone Numbers: --------------- - USA (Caltech, Pasadena, CA) +1 626 395 2112 - Switzerland (CERN, Geneva) +41 22 76 71400 - Slovakia (UPJS, Kosice) +421 55 234 2420 - Italy (INFN, several cities) http://server10.infn.it/video/index.php?page=telephone_numbers Enter '4000' to access the EVO bridge - Germany (DESY, Hamburg) +49 40 8998 1340 - USA (BNL, Upton, NY) +1 631 344 6100 - United Kingdom (University of Manchester) +44 161 306 6802 - Australia (ARCS) +61 Adelaide 08 8463 1011 Brisbane 07 3139 0705 Canberra 02 6112 8742 Hobart 03 623 70281 Melbourne 03 8685 8362 Perth 08 6461 6718 Sydney 02 8212 4591 - Netherlands (Nikhef, Amsterdam) +31 20 7165293 Dial '2' at the prompt - Canada (TRIUMF, Vancouver) +1 604 222 7700 - Czech Republic (CESNET, Prague) +420 95 007 2386 - USA (MIT, Cambridge, MA) +1 617 715 4691 - France (RAP, Paris) +33 144 27 81 50

14:30 → 14:35 Minutes taker and Project update

Last meeting minutes: https://wiki.egi.eu/csirt/index.php/Monthly_Meeting_Minutes_18-11-2010 Minutes taker - DC of the week or the backup Please upload minutes to: https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting#Monthly_Meeting_Minutes

14:35 → 14:50 RTIR update - Carlos

In progress: - Goc-DB Integration 90% finished - Templates for the communication - interfacing ticket-status with ssc-monitor - automated user-management monitoring (user ban status) - reworking the malware (stability, reporting, functionality) this is not necessarily needed for the NGI-Run but for Concerted run. - Any issue or problem? - Plan for next month

14:50 → 15:05 EGI Critical Vulnerability Handling procedure

https://documents.egi.eu/secure/ShowDocument?docid=283
Aim for all EGI sites, need to be approved by OMB

https://documents.egi.eu/secure/ShowDocument?docid=282
More detail, aim for CSIRT and SVG members

15:05 → 15:20 Group activities update and forward planning

Update from group coordinators: --IRTF Update on SIG: https://wiki.egi.eu/csirt/index.php/Security_Intelligence_Group General operation guidelines for security officer on duty * Howtos Wiki page update: https://wiki.egi.eu/wiki/EGI_CSIRT:Incident_reporting update incident handling flowchart? --Security monitoring (Daniel) Security dashboard and integration * discussion with operationa dashboard developer * Present at OTAG meeting --Security drill (Sven) Update on preparation for SSC4 NGI run - Spanish NGI *working on the SSC-Monitor, this will consist, of the malware controler and the ticketing system used for ssc * Carlos set up RT-IR on the SSC-Monitor * Still try to to start in January, working in progess --Security training & dissemination (Dorine)

15:20 → 15:25 Next face to face meeting

Doodle poll: http://doodle.com/taceqg3u6v4feaxm EGIUF2010 (11-15 April 2011): Call for Abstract due 24th Dec. https://www.egi.eu/indico/conferenceCFA.py?confId=207

15:25 → 15:30 AOB

Holiday coverage; Monday meetings? Start to tidy up wiki area, but slow! Next monthly meeting: 20-Jan-2011 (Thursday)