2022-11-08 Security Subcommittee Meeting Notes

Security Call Data Record (SCDR) presentation by David

Secure slicing capability in 5G is seemed almost equivalent VLAN capability. 

https://wiki.lfnetworking.org/pages/viewpage.action?pageId=74647627

Byung presented yesterday, one of the things was Intent Based Networking, Maggie will present as well around this topics (metrics).

Logging Global Requirement

Choice of application logging standardout and standarderr - security challenged. Problem statement: Fluentbit can not access logs in other pod. Changing base image with modifying permissions for standardout and standarderr. Potential compliance issue to be studied.

Long term solution would deal with security mesh (ISTIO based).

Log format - not specified in GR. Java POC for CPS is in JSON, but at this stage it might be an impact.

Bob to come back to Vijay with Berth in copy.

Unmaintained meeting

New time line - after PTLs call - to be confirmed with David.

SBOM crossproject

Muddasar is working with LF support. Changing version of output file was causing problems.

London SECCOM requirements

Approved by TSC.

TSC meeting on November 3rd

Kohn Release notes

Ongoing TSC Chair/Vice Chair elections

LFN Governance Board ONAP status update – slide deck preparation

ONAP transformation - presentation by Magnus

ONAP cross-community topic for LFN DDF - SBOM https://wiki.lfnetworking.org/pages/viewpage.action?pageId=80281797, TSC are in agreement on the topic for first day of D&TF

Architecture subcommittee

Checking what could be the input to Magnus' Mainstream (to be presented at the DTF).

Presentation about security by Andrew with Byung assistance.

Operational Security Assurance for Open Source 5G Mobile Networks

Will be presented by Maggie at the DTF.

SECCOM MEETING CALL WILL BE HELD ON 29th OF November'22.