EGI-CSIRT Face2Face meeting in Abingdon

Contribution List

24. Welcome Logistics Events

David Kelsey (STFC), Mr Ian Neilson (STFC)

08/09/2016, 09:00

Welcome_Logisitcs_Last_Meeting

0. Introduction, Last meeting, Agenda, note takers, logistics etc

Dr Sven Gabriel (NIKHEF)

08/09/2016, 09:30

Welcome_Logisitcs_Last_Meeting

32. EGI-CSIRT Web

Barbara Krasovec (ARNES), Mr Ian Neilson (STFC), Sophie Ferry (CEA)

08/09/2016, 09:50

CSIRT Web Appearance

21. Debriefing EGI-20160509-01

Vincent Brillault (CERN)

08/09/2016, 11:30

IRTF Debriefing/WLCG Traceability

22. WLCG Traceability & Isolation

Vincent Brillault (CERN)

08/09/2016, 12:00

IRTF Debriefing/WLCG Traceability

23. Certification Procedures

Dr Sven Gabriel (NIKHEF)

08/09/2016, 13:30

SPG/IRTF Site Certification Procedure / Pakiti Deployment / SOCs

20. SOCs WLCG working group on Security Operations Centres

Mr Ian Neilson (STFC)

08/09/2016, 14:00

SPG/IRTF Site Certification Procedure / Pakiti Deployment / SOCs

29. SPG Update

David Kelsey (STFC)

08/09/2016, 14:40

SPG/IRTF Site Certification Procedure / Pakiti Deployment / SOCs

27. Training Portfolio / RPT / Offensive / Defnsive

Dr Sven Gabriel (NIKHEF)

08/09/2016, 15:30

Trainings_SSC_SVG

26. HepSysMan Training

Mr Ian Neilson (STFC)

08/09/2016, 15:50

Trainings_SSC_SVG

31. TLP Updated definitions

Dr Sven Gabriel (NIKHEF)

08/09/2016, 16:10

Trainings_SSC_SVG

28. SVG

Linda Cornwall (STFC)

08/09/2016, 16:30

Trainings_SSC_SVG

30. RTIR Updates

Daniel Kouril (CESNET)

09/09/2016, 09:00

Security Monitoring

16. Monitoring

Daniel Kouril (CESNET)

09/09/2016, 09:10

Security Monitoring

19. Pakiti Deployment

Vincent Brillault (CERN)

09/09/2016, 10:30

Security Monitoring

14. PY2 Planning

David Kelsey (STFC)

09/09/2016, 13:30

WrapUp Actions Next Meting

Wrap up Discussion on PY2 planning

7. AOB, wrap-up

09/09/2016, 14:00

WrapUp Actions Next Meting

8. Agenda review

17. CSIRT Web-Page

Barbara Krasovec (ARNES), Mr Ian Neilson (STFC), Sophie Ferry (CEA)

5. EGI FedCloud Security

Boris Parak (CESNET), Daniel Kouril (CESNET), Dr Enol Fernandez (EGI.eu), Dr Sven Gabriel (NIKHEF), Vincent Brillault (CERN)

VB (15 min + 15 min Discussion) Incident Response in FedCloud -summary of Cloud incidents, what is working well, what not, what is missing (30 min + Discussion) EGI Federated Cloud improvement plan (focus on security) Sveng: RP Certification Procedure (15 min Presentation 15 min Discussion) Discussion VM/User Management beyond OpenNebula (Boris) Automated security checks done by CZ (Daniel)

6. EGI FedCloud Security (continued)

10. EGI-Engage SA1.2

David Kelsey (STFC)

Reminder of what happened in PY1. Roadmap for PY2 (starting 1 March 2016).

18. Incidents Debriefing

Vincent Brillault (CERN)

3. IRTF part 1

Daniel Kouril (CESNET), Mr Ian Neilson (STFC), Mr Tobias Dussa (KIT-CERT), Vincent Brillault (CERN)

Presentation - expectations of the officer on duty (15 minutes presentation, 15 minutes discussions?) Massticket-tool (as part of How to use the tools as Security Officer on Duty Input from: (Daniel/Ian/Vincent/Toby) Basic presentation on how to use mass ticket Discuss on how to improve the template/make it simpler 15 minutes presentation, 30 minutes discussion? Central...

4. IRTF part 2

Vincent Brillault (CERN)

Debriefing for EGI-20160228-01 Less than 15 minutes, this is a simple incident Debriefing for EGI-20160301-01 At least 15 minutes? Quite few complications. Output interesting for Fedcloud part of the meeting

12. News from ISGC2016, EGI CSIRT web & wiki

Dr Sven Gabriel (NIKHEF)

13. Plans for next meetings

15. PY2 Planning

David Kelsey (STFC)

15 min Presentation of the proposal draft send in on 7th Sept Discussion, what can we add, what do we want to do, what are the priorities

2. Security Monitoring

Daniel Kouril (CESNET)

Update on RT-IR Update on pakiti, security dashboard How to use the tools as Security Officer on Duty

9. Security policies

David Kelsey (STFC)

Brief update of status of new/revised policies. Policies to be updated in 2016. Some word-smithing on one policy (if time?)

1. SVG issues and Risk Assessment (SCG)

Linda Cornwall (STFC)

Report and discussion on Security Threat Risk Assessment. outcomes - what we are doing or need to do to address the main areas of concern. Monitoring other than the WN. Some vulnerabilities are considered 'Critical' in some cases, but not 'Critical' on the WN, which is all that can be monitored at present. Is there anything better that can be done?

25. SVG, Status update

Linda Cornwall (STFC)

11. Update on SSC

Dr Sven Gabriel (NIKHEF)

Back to the event