Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This is a wiki page that captures the intent and planned/ongoing actions for the support of security coordination in ONAP.

...

Vulnerability management covers how to handle the reception of an identified vulnerability through to solution and communication of the vulnerability.  The process is initiated by the reception of an email to onap-security@lists.onap.org.  The vulnerability management procedures can be found here: ONAP Vulnerability Management.

The vulnerability management procedures are executed on by the vulnerability management sub-committee.

Release Vulnerabilities

This lists the vulnerabilities reported for each Release.

ONAP security sub-committee

The ONAP security sub-committee identifies and creates proposals related to security in ONAP.  As one example, it has created the proposal for the Vulnerability management procedures which are now in effect.  The ongoing efforts of the ONAP security sub-committee are now to explore more proactive security activities. 

...

The ONAP security sub-committee meeting logistics are:

...

JIRA project for issue prioritizationhttps://jira.onap.org/projects/SECCOM/

Next Call:

Jira Legacy
serverSystem Jira
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
maximumIssues20
jqlQueryproject=seccom and priority=Highest and status IN ("Open", "Submitted", "To Do", "Reopened", "In Progress")
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176

2nd Week:

Jira Legacy
serverSystem Jira
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
maximumIssues20
jqlQueryproject=onaparc and priority=High and status IN ("Open", "Submitted", "To Do", "Reopened", "In Progress")
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176

Backlog (items to be done):

Jira Legacy
serverSystem Jira
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
maximumIssues20
jqlQueryproject=seccom and priority!=highest and priority !=high and status!="done"
serverId4733707d-2057-3a0f-ae5e-4fd8aff50176




If you want to be involved, please contact Stephen.terrill@ericsson.com or Pawel Pawlak or Amy Zwarico

Note: if you would like to change the contents of this site, please contact Stephen terrill contact Pawel Pawlak or Amy Zwarico.