...
Jira No | Summary | Description | Status | Solution | Honolulu SECCOM requirements | ongoing | To be presented at the LFN event within Requirements Subcommitee review. | Instambul SECCOM requirements |
| ongoing | Slide to be updated and shared with Alla. |
---|---|---|---|---|---|---|---|---|---|---|---|
LFN event | 2 presentations provided:
Feedback from Kenny on maintaining historical data on CII Badging answers - done by Tony. | done | Slides on SECCOM requirements to be presented at the next Requirements Subcommittee meeting on Monday February 15th. POM file version to be provided to PTLs. Exception process with deadline before RC0. | ||||||||
ONAP Log security management | Fabian shared his presentation:
2 types of basic image hardening. It was done by Morgan (for both java and python). PoCs with SPC (brand news project) and Policy (project which already took efforts to integrate with logging and uses stdout aready!) proposed to move forward. | ongoing | Next steps Deploy logging architecture Analyze events linked to threats Morgan to be consulted with standard images. To be confirmed if Policy uses a standard image - not yet but planned to use in Honolulu release. | ||||||||
Anuket - new project | Update from Samuli: Anuket and XGVela: define common PaaS services. Anuket: the basic PaaS services, XGVela the telco specific. | Service Mesh PoC status update | New release of Kubernetes to be integrated. Some issue with Envoy. | Sonarcloud crypto takeaways | Weak crypto report from Sonarcloud. Jiras to be opened. How to get a report with API to be figured out. 5 cathegories of findings: certificate validation, host name of certificate, using secure mode and padding, using weak protocols, encoding passwords as plain text. | Logs management – what to do next? | We come back to this topic during next meeting (in February 9th) | ||||
OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 16th OF FEBRUARY'21. |
Recording:
View file | ||||
---|---|---|---|---|
|
SECCOM presentation:
View file | ||||
---|---|---|---|---|
|