Focus on:  Hide Contributions
Login

EGI-CSIRT Face2Face meeting in Prague

17–19 Jan 2017
Prague
Europe/Amsterdam timezone

Contribution List

28 / 28
7. Intro / Agenda
Dr Sven Gabriel (NIKHEF)
17/01/2017, 13:00
15. Venom Rootkit
Daniel Kouril (CESNET)
17/01/2017, 16:00
16. Debriefing
Daniel Kouril (CESNET), Dr Sven Gabriel (NIKHEF), Vincent Brillault (CERN)
17/01/2017, 16:30
17. ISGC CSIRT Presentation
Dr Sven Gabriel (NIKHEF)
18/01/2017, 09:00
18. ISGC Fyodor
Fyodor Yarochkin (AS)
18/01/2017, 09:30
19. ISGC Training
Dr Sven Gabriel (NIKHEF)
18/01/2017, 10:00
28. Trainings in EGI
Dr Sven Gabriel (NIKHEF)
18/01/2017, 11:00
20. Enhanced privacy for security-related GGUS tickets
Mr Ian Neilson (STFC), Vincent Brillault (CERN)
18/01/2017, 14:00
... evaluate the possibility for security officers to open GGUS tickets for selected sites, informing them on sensitive information (poorly configured services, urgent patches, etc) so, such tickets should remain more private than the rest. Today, GGUS ticket viewing requires a valid certificate from a trusted CA AND also to be a registered GGUS user. Also, GGUS tickets are not googleable,...
21. Argus monitoring
Mr Ian Neilson (STFC), Vincent Brillault (CERN)
18/01/2017, 14:15
The argus framework was never tested on a project level. Start project to test the that the banning info ends up at the CEs/WMSs/in the VO-WMSes (Panda, CRAB etc) banning Issues with the storage systems. Presentation: IanN,Status update from UK on testing argus
14. VB Security contact mailing list
Vincent Brillault (CERN)
18/01/2017, 14:45
13. VB Procedures for introduction SUID binary?
Vincent Brillault (CERN)
18/01/2017, 15:00
26. Security Monitoring /Dashboard Status Update
Daniel Kouril (CESNET), Vincent Brillault (CERN)
18/01/2017, 16:30
Status of the IRTF tools: - Security Dashboard - RT-IR - Massticket system - Single Ticket mode
27. IR in FedCloud, preparation session
Vincent Brillault (CERN)
18/01/2017, 17:00
- Prepare for the Session with FedCloud on Thursday - With who do we communicate - Do we treat FedCloud Users as Admins? (Trustwise, i.e. add them to the ticket?) - What is the role of the VO here? - Note: we may see situations, were users set up compute clusters in the cloud, to be used by multiple people from a vo - Note 2: we may see situations, were users set up compute clusters in the...
12. VB IRTF Mandate, duty rota and future
Vincent Brillault (CERN)
18/01/2017, 18:00
6. EGI Security Threat Risk Assessment
Linda Cornwall (STFC)
Security requirements and risk assessment for new services, technology, and deployments The new developments and evolving usage scenarios in EGI-Engage will involve trust models different from the core infrastructure used in EGI-InSPIRE. The task will ensure that the security requirements and the trust model are defined. Any security problems will be addressed and risk assessment associated...
4. Integration to IRTF
Vincent Brillault (CERN)
10. IPv6 Security
David Kelsey (STFC)
22. IRTF Mandate, duty rota and future
Vincent Brillault (CERN)
Goals: Making IRTF more productive for Incident Response and stop doing non-interesting stuff
1. Masstickets
Mr Tobias Dussa (KIT-CERT)
How to go about this? Possible goal: be able to grab a list of all EGI-Critical vuln hosts out of Pakiti, drop it into a script, and presto, the script creates a ticket per site. Reasonable? There would be some prereqs: * As reference, there must be a unified URL format, ideally something like https://wiki.egi.eu/wiki/EGI_CSIRT:Alerts/CVE-XXXX-YYYY. (I'd actually like to have the ability...
23. Procedures for introduction SUID binary
Vincent Brillault (CERN)
2. RT-IR in IRTF, useage
Vincent Brillault (CERN)
RT-IR usage in IRTF, Discussion with Maintainer, what do we want to do with rt-ir, hww can this be done with rt-ir, what is needed / who does it
0. RT-IR Status
Michal Stava (CESNET)
24. Security contact mailing list
Vincent Brillault (CERN)
8. Security Policy update and issues
David Kelsey (STFC)
Develop a new trust framework and develop new policies In collaboration with other infrastructures, we will define new additions to a new policy framework to handle the new deployment and usage scenarios as they evolve in EGI-Engage.
9. Security procedures updates
Vincent Brillault (CERN)
The evolution of operational security procedures, including forensics Refine and extend the current security procedures and tools for incident response and forensics, for example: to take into account new kinds of players (e.g. cloud resource providers), or to extend the emergency suspension mechanism to cover new kinds of services. The security procedures related to other EGI operational...
25. SVG
Linda Cornwall (STFC)
3. User/VM Management in FedCloud
Boris Parak (CESNET)
5. VM Management/SSC
Dr Sven Gabriel (NIKHEF)
Needed bits fur SSC-FC VM Management: Start/Stop/Contextualisation How to get the SSC Payload into the VMs What would be needed to control it from SSC-Monitor

Back to the event

Powered by Indico v3.2.7