EGI/EOSC/UK Security Teams F2F - Abingdon, UK

15 Oct 2024, 09:00 → 17 Oct 2024, 17:00 Europe/London

Sven Gabriel (NIKHEF)

For logistics and further meeting details, check the meeting wiki page.

 

Agenda draft NOT FINAL

Tuesday, 15 October ¶

09:00 → 10:30 Tuesday session 1: Status Update¶

09:00 F2F Presentation and EGI updates¶

• News or events on EGI since the last F2F.
• EGI Council approved the service provisioning proposal
• New OLA for Security Coordination (Apr 2024 - Dec 2026) -> https://docs.google.com/document/d/1sjMGnaSA9itSb1K01Er0Mmh7wPvZNaDBZtYBiwl2C5Y/edit
• EGI Core Services Perfomance report January 2024 - June 2024 -> https://documents.egi.eu/public/ShowDocument?docid=2324
• New SURF certificates
• Infrastructure deploied and/or migrated: Gitlab, EGI relay, CommsChallenge server

Speakers: Baptiste Grenier (EGI.eu), Sven Gabriel (NIKHEF)

09:20 Monitoring + Vulnerablility Management¶

Present the work done during the last months and the status of the project.

Speaker: Daniel Kouril (CESNET)

09:50 Roles and responsibilities in IR¶

REF: https://jira.egi.eu/browse/EGIIRTF-93

Speaker: Daniel Kouril (CESNET)

10:20 Communication Challenges¶

Discuss how non responsive/unreachable sites should be tracked in coordination with EGI Ops.

Speaker: Pau Cutrina Vilalta

10:30 → 11:00 Break

11:00 → 12:30 Status Update: Presentation¶

11:00 Review first 12 months of the TTT WG¶

Speaker: Matt Doidge (Lancaster University)

TTT github

TTTCHEP24-1.0-final.pdf

11:40 Software vulnerability handling¶

15 minute presentation on what we do and ideas, plus 15 mins + discussion
Status of James Acris on actively sharing the work.

Speaker: Linda Cornwall (STFC)

"Minimum viable scope"

12:10 FedCloud Security¶

Speaker: Baptiste Grenier (EGI.eu)

12:30 → 14:00 Lunch

14:00 → 15:30 Tuesday session 3: Collaborations¶

14:30 Status of the collaboration with other communities¶

• Presentation of SICURA-LAC and the possible collaborations that have been demonstrated with others such as LAC4.
• What can we learn from the community that could be useful for EGI? i.e. experience with pDNSSOC, trainings, ...

Speaker: Pau Cutrina Vilalta

14:40 Collaboration with VOs¶

• Frequent call with VO representatives:
  - It could be a short call every three months (about 30 minutes) where incidents are presented, along with security news, followed by a presentation or discussion on a relevant topic, and concluding with a Q&A or feedback session.
• VOs security policies and procedures:
  - CMS has developed a "User Account Suspension Policy/Procedure." Other VOs might have similar policies in place or may be interested in seeing how others handle it.
• Security Survey/Checklist:
  - Coordinated with the VOs.
  - Assess needs and collaboration opportunities based on WLCG policies.
• Newsletter and security updates

Speakers: Jose Carlos Luna (CERN), Pau Cutrina Vilalta

15:30 → 16:00 Break

16:00 → 17:00 Tuesday session 4: Initiatives¶

16:00 Training activities¶

(EGI webinar, tCSC, EGI Conference etc.) - what are we planning?

Speaker: Barbara Krasovec (JSI)

Wednesday, 16 October ¶

09:00 → 10:30 Wednesday session 1: Initiatives¶

09:00 Review: EGI Security Traceability and logging policy¶

• Review of the policy.
• Initiatives to improve compliance.

Speakers: Barbara Krasovec (JSI), Pau Cutrina Vilalta

09:45 Incident Response Workshop Organization¶

• Technical training and tool demonstrations.
• Incident response exercises.
• Define the scope, small sites vs mature admins

Speakers: Jose Carlos Luna (CERN), Pau Cutrina Vilalta

10:30 → 11:00 Break

11:00 → 12:30 Wednesday session 2¶

11:00 Security Service Challenge¶

• Status update and next steps.

Speaker: Sven Gabriel (NIKHEF)

11:45 Cross-Team monthly meeting¶

Speaker: David Kelsey (STFC)

12:30 → 14:00 Lunch

14:00 → 15:30 Wednesday session 3¶

14:00 Incident Response Debrief¶

Speaker: Baptiste Grenier (EGI.eu)

15:30 → 16:00 Break

16:00 → 16:30 Wednesday session 4: Summary¶

16:00 Summary and recap of actions¶

• Show the actions pending of completition in Jira.
• List all the actions that have been noted during the F2F discussions and create actionable tasks.

Speaker: Pau Cutrina Vilalta

Thursday, 17 October ¶

09:00 → 10:30 Joint session 1¶

• How to be a CSIRT

10:30 → 11:00 Break

11:00 → 12:30 Joint session 2¶

• DRI update and shared activities

12:30 → 13:30 Lunch | EGI/EOSC Close | UK Start

13:30 → 15:30 UK Security 1¶

13:30 IRIS CSIRT¶

14:00 Engagement, skills and training¶