2022-11-29 Security Subcommittee Meeting Notes (under construction)

Please find below the Minutes of Meetings and recording for the SECCOM meeting that was held on 29th of November 2022.

Summary	Description	Solution
Security Call Data Record (SCDR) presentation by David	Secure slicing capability in 5G is seemed almost equivalent VLAN capability. https://wiki.lfnetworking.org/pages/viewpage.action?pageId=74647627 Byung presented yesterday, one of the things was Intent Based Networking, Maggie will present as well around this topics (metrics).
Logging Global Requirement	Choice of application logging standardout and standarderr - security challenged. Problem statement: Fluentbit can not access logs in other pod. Changing base image with modifying permissions for standardout and standarderr. Potential compliance issue to be studied. Long term solution would deal with security mesh (ISTIO based). Log format - not specified in GR. Java POC for CPS is in JSON, but at this stage it might be an impact.	Bob to come back to Vijay with Berth in copy.
Unmaintained meeting	New time line - after PTLs call - to be confirmed with David.
SBOM crossproject	Muddasar is working with LF support. Changing version of output file was causing problems.
London SECCOM requirements	Approved by TSC.
TSC meeting on November 3rd	Kohn Release notes Ongoing TSC Chair/Vice Chair elections LFN Governance Board ONAP status update – slide deck preparation ONAP transformation - presentation by Magnus ONAP cross-community topic for LFN DDF - SBOM https://wiki.lfnetworking.org/pages/viewpage.action?pageId=80281797, TSC are in agreement on the topic for first day of D&TF
Architecture subcommittee	Checking what could be the input to Magnus' Mainstream (to be presented at the DTF). Presentation about security by Andrew with Byung assistance.
Operational Security Assurance for Open Source 5G Mobile Networks	Will be presented by Maggie at the DTF.
SECCOM MEETING CALL WILL BE HELD ON 6th OF December'22.

Recordings:

SECCOM presentation: