EGI/EOSC/UK Security Teams F2F - Abingdon, UK

Oct 15, 2024, 9:00 AM → Oct 17, 2024, 5:00 PM Europe/London

Sven Gabriel (NIKHEF)

For logistics and further meeting details, check the meeting wiki page.

 

Agenda draft NOT FINAL

Tuesday, October 15

9:00 AM → 10:30 AM Tuesday session 1: Status Update

9:00 AM F2F Presentation and EGI updates

• News or events on EGI since the last F2F.
• EGI Council approved the service provisioning proposal
• New OLA for Security Coordination (Apr 2024 - Dec 2026) -> https://docs.google.com/document/d/1sjMGnaSA9itSb1K01Er0Mmh7wPvZNaDBZtYBiwl2C5Y/edit
• EGI Core Services Perfomance report January 2024 - June 2024 -> https://documents.egi.eu/public/ShowDocument?docid=2324
• New SURF certificates
• Infrastructure deploied and/or migrated: Gitlab, EGI relay, CommsChallenge server

Speakers: Baptiste Grenier (EGI.eu), Sven Gabriel (NIKHEF)

9:20 AM Monitoring + Vulnerablility Management

Present the work done during the last months and the status of the project.

Speaker: Daniel Kouril (CESNET)

9:50 AM Roles and responsibilities in IR

REF: https://jira.egi.eu/browse/EGIIRTF-93

Speaker: Daniel Kouril (CESNET)

10:20 AM Communication Challenges

Discuss how non responsive/unreachable sites should be tracked in coordination with EGI Ops.

Speaker: Pau Cutrina Vilalta

10:30 AM → 11:00 AM Break

11:00 AM → 12:30 PM Status Update: Presentation

11:00 AM Review first 12 months of the TTT WG

Speaker: Matt Doidge (Lancaster University)

TTT github

TTTCHEP24-1.0-final.pdf

11:40 AM Software vulnerability handling

15 minute presentation on what we do and ideas, plus 15 mins + discussion
Status of James Acris on actively sharing the work.

Speaker: Linda Cornwall (STFC)

"Minimum viable scope"

12:10 PM FedCloud Security

Speaker: Baptiste Grenier (EGI.eu)

12:30 PM → 2:00 PM Lunch

2:00 PM → 3:30 PM Tuesday session 3: Collaborations

2:30 PM Status of the collaboration with other communities

• Presentation of SICURA-LAC and the possible collaborations that have been demonstrated with others such as LAC4.
• What can we learn from the community that could be useful for EGI? i.e. experience with pDNSSOC, trainings, ...

Speaker: Pau Cutrina Vilalta

2:40 PM Collaboration with VOs

• Frequent call with VO representatives:
  - It could be a short call every three months (about 30 minutes) where incidents are presented, along with security news, followed by a presentation or discussion on a relevant topic, and concluding with a Q&A or feedback session.
• VOs security policies and procedures:
  - CMS has developed a "User Account Suspension Policy/Procedure." Other VOs might have similar policies in place or may be interested in seeing how others handle it.
• Security Survey/Checklist:
  - Coordinated with the VOs.
  - Assess needs and collaboration opportunities based on WLCG policies.
• Newsletter and security updates

Speakers: Jose Carlos Luna (CERN), Pau Cutrina Vilalta

3:30 PM → 4:00 PM Break

4:00 PM → 5:00 PM Tuesday session 4: Initiatives

4:00 PM Training activities

(EGI webinar, tCSC, EGI Conference etc.) - what are we planning?

Speaker: Barbara Krasovec (JSI)

Wednesday, October 16

9:00 AM → 10:30 AM Wednesday session 1: Initiatives

9:00 AM Review: EGI Security Traceability and logging policy

• Review of the policy.
• Initiatives to improve compliance.

Speakers: Barbara Krasovec (JSI), Pau Cutrina Vilalta

9:45 AM Incident Response Workshop Organization

• Technical training and tool demonstrations.
• Incident response exercises.
• Define the scope, small sites vs mature admins

Speakers: Jose Carlos Luna (CERN), Pau Cutrina Vilalta

10:30 AM → 11:00 AM Break

11:00 AM → 12:30 PM Wednesday session 2

11:00 AM Security Service Challenge

• Status update and next steps.

Speaker: Sven Gabriel (NIKHEF)

11:45 AM Cross-Team monthly meeting

Speaker: David Kelsey (STFC)

12:30 PM → 2:00 PM Lunch

2:00 PM → 3:30 PM Wednesday session 3

2:00 PM Incident Response Debrief

Speaker: Baptiste Grenier (EGI.eu)

3:30 PM → 4:00 PM Break

4:00 PM → 4:30 PM Wednesday session 4: Summary

4:00 PM Summary and recap of actions

• Show the actions pending of completition in Jira.
• List all the actions that have been noted during the F2F discussions and create actionable tasks.

Speaker: Pau Cutrina Vilalta

Thursday, October 17

9:00 AM → 10:30 AM Joint session 1

• How to be a CSIRT

10:30 AM → 11:00 AM Break

11:00 AM → 12:30 PM Joint session 2

• DRI update and shared activities

12:30 PM → 1:30 PM Lunch | EGI/EOSC Close | UK Start

1:30 PM → 3:30 PM UK Security 1

1:30 PM IRIS CSIRT

2:00 PM Engagement, skills and training