Security for Collaborating Infrastructures (SCI) Meeting

14 Jan 2015, 13:30 → 15 Jan 2015, 13:30 Europe/London

DFN Berlin

The agenda and timings are still draft. SCI is a collaborative activity of security staff from several large-scale distributed computing infrastructures, including EGI, OSG, PRACE, EUDAT, CHAIN, WLCG and XSEDE. Aim of this meeting is to review of the current status of the SCI activity and the SCI document (since our last meeting one year ago); to discuss what we should do and need to do to revitalise the work. There is another activity (called Sirtfi) which has taken our published document from the ISGC proceedings and is working on trust for operational security in the world of Identity Federations. We should discuss whether or not to merge back with that activity. Any official member of the IGTF community interested in the development of security policy standards is welcome to join the meeting. For logistics (including video conferencing details) see http://www.eugridpma.org/meetings/2015-01/

Wednesday 14 January

13:30 → 18:00 Session 1

13:30 Introductions, agenda, aims of meeting

13:45 SCI document - towards version 2

Reminder of current status "V1" submitted to ISGC2013 conference proceedings; Updated version as of Jan 2014 SCI meeting; Latest Sirtfi draft; Produce a Version 2 document.

document

• ISGC_2013_011.pdf
• SCI-v1.4.doc
• SCI-v1.4.pdf
• SCI-v1.5.doc
• SCI-v1.5.pdf
• SirTfi-V1.7_downloaded_8jan15.docx
• SirTfi-V1.7_downloaded_8jan15.pdf

15:30 Break

16:00 Discussion of Sirtfi activity

Do we want to merge documents or keep separate branches?

16:30 Self assessment - status and plans

Do we take the always foreseen next steps of more detailed self-assessments and peer (or bi-lateral) reviews?

Thursday 15 January

09:15 → 13:30 Session 2

09:15 Review agenda

09:30 Back to SCI paper?

10:00 Future SCI activities

Discussion of possible next steps Security risk assessment? Operational security for Federated Clouds? What other activities would be useful for operational security trust and collaboration? i. A joint security workshop during 2015? ii. More training events?

10:30 Break

11:00 Discussion - future plans

What other activities would be useful for operational security trust and collaboration? i. A joint security workshop during 2015? ii. More training events? If we produce a next version of the SCI document, where do we publish (IGTF? OGF? Elsewhere?) - where is our best home? Communication of our work with others. How to organise the self assessments.

12:00 AOB, next meetings and wrapup