EGI CSIRT team monthly meeting

Thursday 19 Aug 2010, 14:30 → 15:50 Europe/Amsterdam

EVO - EGI CSIRT meeting

Mingchao Ma (STFC - RAL)

A monthly team meeting to discuss team activities and issues It will be on EVO (http://evo.caltech.edu/evoGate/). Meeting can be found in Universe community, please search EVO meeting with keyword "EGI CSIRT" Access information can be found at: https://wiki.egi.eu/csirt/index.php/EGI_CSIRT_monthly_meeting EVO Phone Bridge Telephone Numbers: --------------- - USA (Caltech, Pasadena, CA) +1 626 395 2112 - Switzerland (CERN, Geneva) +41 22 76 71400 - Slovakia (UPJS, Kosice) +421 55 234 2420 - Italy (INFN, several cities) http://server10.infn.it/video/index.php?page=telephone_numbers Enter '4000' to access the EVO bridge - Germany (DESY, Hamburg) +49 40 8998 1340 - USA (BNL, Upton, NY) +1 631 344 6100 - United Kingdom (University of Manchester) +44 161 306 6802 - Australia (ARCS) +61 Adelaide 08 8463 1011 Brisbane 07 3139 0705 Canberra 02 6112 8742 Hobart 03 623 70281 Melbourne 03 8685 8362 Perth 08 6461 6718 Sydney 02 8212 4591 - Netherlands (Nikhef, Amsterdam) +31 20 7165293 Dial '2' at the prompt - Canada (TRIUMF, Vancouver) +1 604 222 7700 - Czech Republic (CESNET, Prague) +420 95 007 2386 - USA (MIT, Cambridge, MA) +1 617 715 4691 - France (RAP, Paris) +33 144 27 81 50

1 Minutes taker and Project update

Minutes taker - DC of the week or the backup Project milestone and deliverable: MS405 Operational Security Procedures: https://documents.egi.eu/public/ShowDocument?docid=47 Review feedback: https://documents.egi.eu/document/67 Communcation channel: - Certified sites CSIRT mailing list - the rest sites on another mailing list EGI TF conference registration and agenda: https://www.egi.eu/indico/conferenceTimeTable.py?confId=48

2 Group activities update and forward planning

Update from group coordinators: --IRTF Incident handling procedure https://documents.egi.eu/public/ShowDocument?docid=47 Review feedback: https://documents.egi.eu/document/67 Wiki page update: https://wiki.egi.eu/wiki/EGI_CSIRT:Incident_reporting update incident handling flowchart? Procedure improvement? * Vulnerability assessment * SVG advisory --Security monitoring roadmap and priority finalised? --Security drill SSC4 result How can NGIs run SSC4? --Security training & dissemination wiki update how to? security training at EGI TF CSIRT logo vote result: https://wiki.egi.eu/csirt/index.php/Logo

3 update from team members

around table update

4 EGI technical forum conference planning

14/09/2010-17/09/2010, at Amesterdam, https://www.egi.eu/indico/conferenceTimeTable.py?confId=48 Registration 2nd Sep (normal fee)? Any Poster/Demo? -- Joint security training session, Friday 14:00-17:30 EGI CSIRT 2 hours, Middleware security: 1 hour Possible topics * SSC4 case study * security monitoring: Pakiti and Nagio-based security monitoring * security incident response procedure Question: who will not be available on Friday afternoon? -- EGI CSIRT f2f meeting Draft agenda at https://www.egi.eu/indico/sessionDisplay.py?sessionId=21&slotId=0&confId=48#2010-09-14 Tele-conference for remote joining? Anyone will not go? -- Security Forum - Open discussion, Thursday 16:00-17:30 -- Security Policy Group, Wednesday 11:00-12:30 -- Software Vulnerability Group, Thursday 14:00-15:30 Plan for next face to face meeting (in about 5-7 months)

5 Action review

To review any pending actions and ongoing issues https://rt.egi.eu/rt/index.html

6 AOB

-- Next monthly meeting: ??? -- Agreed list of new actions