EGI CSIRT team monthly meeting

Thursday 26 May 2011, 14:00 → 15:30 Europe/Amsterdam

EVO - EGI CSIRT meeting

Mingchao Ma (STFC - RAL)

A monthly team meeting to discuss team activities and issues It will be on EVO (http://evo.caltech.edu/evoGate/). Meeting can be found in EGI community, please search EVO meeting with keyword "EGI CSIRT" Access information can be found at: https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting EVO Phone Bridge Telephone Numbers: --------------- - USA (Caltech, Pasadena, CA) +1 626 395 2112 - Switzerland (CERN, Geneva) +41 22 76 71400 - Slovakia (UPJS, Kosice) +421 55 234 2420 - Italy (INFN, several cities) http://server10.infn.it/video/index.php?page=telephone_numbers Enter '4000' to access the EVO bridge - Germany (DESY, Hamburg) +49 40 8998 1340 - USA (BNL, Upton, NY) +1 631 344 6100 - United Kingdom (University of Manchester) +44 161 306 6802 - Australia (ARCS) +61 Adelaide 08 8463 1011 Brisbane 07 3139 0705 Canberra 02 6112 8742 Hobart 03 623 70281 Melbourne 03 8685 8362 Perth 08 6461 6718 Sydney 02 8212 4591 - Netherlands (Nikhef, Amsterdam) +31 20 7165293 Dial '2' at the prompt - Canada (TRIUMF, Vancouver) +1 604 222 7700 - Czech Republic (CESNET, Prague) +420 95 007 2386 - USA (MIT, Cambridge, MA) +1 617 715 4691 - France (RAP, Paris) +33 144 27 81 50

1 Minutes Review

Last meeting (face to face at KIT) minutes: https://wiki.egi.eu/csirt/index.php/Face_to_Face_Meeting_Minutes_6%267-04-2011 - Any question/comment on the minutes? - Minutes taker - DC of the week or the backup Minutes template was updated to include action items https://wiki.egi.eu/csirt/index.php/Minutes_Template Please upload minutes to: https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting#Monthly_Meeting_Minutes

2 Procedures Update

EGI CSIRT ToR: https://documents.egi.eu/document/385, final version EGI-CSIRT Critical Vulnerability Handling Procedure is on SA1 wiki https://wiki.egi.eu/wiki/SEC03, it is in a seperate name space to enable access control 2) Critical Vulnerability Handling Procedure (Joint CSIRT/SVG) (Word Doc) Joint SVG and CSIRT process to handle critical vulnerabilities. https://documents.egi.eu/secure/ShowDocument?docid=282 Primary author: Linda Primary reviewer: Leif Current status?? Should it be on CSIRT private wiki? How to use RTIR to automate the process described in this document? Need update: https://wiki.egi.eu/csirt/index.php/Handling_critical_vulnerabilities

3 EGI Technical Forum 2011, Lyon 19-23 Sep.

http://tf2011.egi.eu/, co-located with the Open Grid Forum and Grid 2011 Programe: https://www.egi.eu/indico/conferenceDisplay.py?confId=452 following sessions were proposed, waiting for confirmation EGI CSIRT face to face meeting (3 hours) Joint CSIRT/Middleware security training (6 hours) SVG face to face meeting (1.5 hour) SVG general meeting (1.5 hour) Anyone plans to prepare any poster/presentation in name of CSIRT or SVG? Call for participation now open until 3rd June

4 Face to Face meeting action review

https://wiki.egi.eu/csirt/index.php/Face_to_Face_Meeting_Minutes_6%267-04-2011

5 Update from group coordinator

IRTF ==== Update since last face to face meeting at KIT Security monitoring =================== Update since last face to face meeting - Progress of security dashboard and integration? - Pakit and Nagios development? Security drill ============== Update since last face to face meeting SSC5 on the way Security training & dissemination ================================= Update since last face to face meeting Collaboration with SA1 operation document team - CSIRT Wikis Link to JANET CSIRT RTIR workflow? http://www.ja.net/services/csirt/about-csirt/rtir/ - security training at EGITF

6 AOB

Next monthly meeting: 23rd June 2011 Identity Management workshop at CERN, 9-10 June 2011 https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting Moonshot HPC and Grid integration workshop in London - 6/7 July http://project-moonshot.org/meetings