2020-10-06 Security Subcommittee Meeting Notes

Please find below the Minutes of Meetings and recording for the  SECCOM meeting that was held on 6th of Cotober 2020.

Jira No

Summary

Description

Status

Solution

Jira No

Summary

Description

Status

Solution

 

ONES NA testimony 

Presentation by Amy and Samuli:

  • Isolation

  • Container Signing & Notaryv2

  • CIS Benchmarks

  • Operating a Service Mesh

  • Securing Managed Apps in a SMO

done

2020_ONES_SecuringANetworkVirtualizedWithContainersAndKubernetes-final.pptx

 

CII Badging Silver Level questions ranking

  1. Crypto Credentials Agility – ½ od apps in met and almost half not yet answered

  2. Implement Secure Design – 1/3 of projects did not answer 

  3. Crypto Weaknesses – tests to be applied (3 including Morgan)

ongoing

 

 

 

Morgan to be contacted.

 

PTL meeting summary

Prevention from zoombombing

SECCOM update

Reminder to PTLs to submit ticket to IT when retiring repositories, so that the repo may be archived.

ongoing

 

 

LFN Fall Technical Meetings October 13 - 15, 2020

Topics from SECCOM:

Service Mesh and packges upgrades.

Maintenance task force - members are welcome!

ongoing

Project in maintenance mode shall provide support/update

 

ONAP Flow matrix and MVP  - next steps

Meeting with Architecture Subcommittee.is planned later today

ongoing

Consultancy to be done with Architecture Subcommittee.

 

ONAP Release milestones

RC0 - October 12th 

RC1 - Octpber 22nd

 

ongoing

 

 

OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 13th OF OCTOBER'20. 

 

 

 

 

Recording:

SECCOM presentation: