Versions Compared

Version Old Version 3 New Version Current
Changes made by

Paweł Pawlak

Paweł Pawlak

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Jira No
SummaryDescriptionStatusSolution

Honolulu SECCOM requirements

Slides prepared and reviewed by Amy:

View file
name2021-01-029_HonoluluSECCOMRequirements.pptx
height150

Common logs management turned into PoC.

ongoingTo be presented at the LFN event within Requirements Subcommitee review.

Instambul SECCOM requirements
  • Packages upgrades
  • CII Badging - crypto verification private and implement secure design
  • PoC Security documentation and assurance cases:with DCAE and CPS
  • Integrate SonarCloud crypto findings as an integration test
  • Integrate SonarCloud coverage results as integration test: block on decreases in code coverage, provide exception process
  • PoC Service Mesh
ongoingSlide to be updated and ahared shared with Alla.

Service Mesh PoC status updateNew release of Kubernetes to be integrated. Some issue with Envoy.


Sonarcloud crypto takeaways

Weak crypto report from Sonarcloud. Jiras to be opened. How to get a report with API to be figured out. 5 cathegories of findings: certificate validation, host name of certificate, using secure mode and padding, using weak protocols, encoding passwords as plain text.  




Logs management – what to do next?

We come back to this topic during next meeting (in February 9th)




OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 9th OF FEBRUARY'21. 




...

View file
name2021-01-26_SECCOM_week.mp4
height150



SECCOM presentation:

View file
name2021-01-26 ONAP Security Meeting - AgendaAndMinutes.pptx
height150