Middleware Security Group Meeting

Contribution List

14. Welcome and overview of the 11th MWSG meeting

Bob Cowles

01/03/2007, 09:00

Opening, Day 1

15. Security Provisioning and Validation Requirements and Solutions

Frank Siebenlist

01/03/2007, 09:20

Opening, Day 1

16. Service robustness in a scanning environment - discussion

Don Petravick

01/03/2007, 10:00

Opening, Day 1

22. Levels of Assurance

Mike Helm

01/03/2007, 10:30

Opening, Day 1

18. gridshib efforts in the US

Von Welch

01/03/2007, 11:30

SHIB

19. Shib in gLite

Christoph Witzig

01/03/2007, 12:15

SHIB

21. VOMS Attribute Authorities

Mike Helm

01/03/2007, 14:00

VOMS

20. VOMS A to Z

Oscar Koeroo

01/03/2007, 14:30

VOMS

23. Topics in AuthN usage, Security Audit Logging Guidelines, and some personal reflections

David Groep

02/03/2007, 09:00

Day 2, OPENING

Authentication: namespace constraints, certificate profile Audit Event Logging: near-term guidelines document Security complexity and some personal reflection: CA release procedure, glExec and site acceptance of security middleware, VO naming, and do ‘normal’ people still understand us?

25. Interoperability Security Concerns

Fredrik Hedman

02/03/2007, 10:00

Day 2, OPENING

26. New Features in MyProxy

Von Welch

02/03/2007, 11:30

MYPROXY

27. VO Service Project: status and plans

Gabriele Garzoglio

02/03/2007, 14:00

Security Topics

28. gLexec: experience with integration

Igor Sfiligoi

02/03/2007, 14:30

Security Topics

29. Security Issues in Panda

Torre Wenaus

02/03/2007, 15:00

Security Topics

10. Auditing requirements

What do we want from an auditing system? What information MUST be there, what MAY be there, etc.

9. Auditing topics

Abhishek Sing Rana

(1) gPlazma: quick current design/implementation, future IDP-wall and Auditing extensions. (2) Auditing: help facilitate discussion with Bob. (3) SRM CET: I am co-PI on the SciDAC proposal. I can give a brief idea of goals (goal is to build a full-fledged multi-VO-multi-site SRM Security & Policy Framework, contributing to SAML/XACML future specs and thus possibly OGSA-Authz-2 and beyond).

0. Dealing with firewalls: xrootd proxy architecture

Andrew Hanushevsky (SLAC)

The xrootd data server, part of the Scalla Software Suite, allows external client access to data protected by firewalls using proxy servers. Since xrootd is a peer-to-peer architecture servers can be recast as clients, making it natural to provide a proxy data service. This talk describes the xrootd proxy mechanism, how proxy clusters can be defined, and future direction to use proxy...

6. EGEE and JSPG activities

Dave Kelsey (Rutherford Appleton Laboratory)

7. EGEE Grid Security Vulnerability Group

Linda Cornwall (presented by Dave Kelsey) (Rutherford Appleton Laboratory)

5. EGEE Security Coordination Group

Ake Edlund (KTH)

12. glexec - update

Gerben Venekamp (NIKHEF, NL)

13. glExec and its Integration into the OSG Software Stack

Keith Chadwick (Fermilab, USA)

8. gLite 3.0 update and plans

John White (CERN)

4. Open Science Grid VO Trust and AUP

Keith Chadwick (Fermilab, USA)

2. OSG Security Activities

Bob Cowles (SLAC)

11. Recent Updates in the Privilege Project

Vikram Andem (Fermilab, USA)

1. The Authentication and Authorization Framework used in xrootd

Andrew Hanushevsky (SLAC)

The xrootd dataserver, part of the Scalla Software Suite, uses a generic authentication framework; implemented via dynamic plug-ins. This architecture provides multi-protocol authentication capabilities and allows clients to auto-configure themselves to correspond to the authentication protocols supported by each server. Adding a new authentication protocol is accomplished by...

3. The NIST Process and how it informs the OSG Security Process

Irwin Gaines (Fermilab, USA)

Back to the event