...
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Damian Nowak Martin Skorupski
...
Organization Mgmt, Sales Strategies - There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider
CONTINUATION OF PACKAGES UPGRADES IN DIRECT DEPENDENCIES (REQ-
...
439)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Pawel Pawlak Amy Zwarico
Executive Summary - All ONAP projects shall continue their efforts to reduce the risks associated with software vulnerabilities in the ONAP code base by upgrading all outdated, vulnerable direct dependencies in their code bases following the recommendations of SECCOM. The project and repo specific recommendations are provided in the Security Vulnerability space for Honolulu release.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators and service providers can leverage the of fewer vulnerabilities in the open source dependencies in ONAP
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
COMPLETION OF JAVA LANGUAGE UPDATE (v8 → v11) (REQ-438)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Amy Zwarico Pawel Pawlak
Executive Summary - All remaining ONAP projects using java shall reduce the risks associated with no regular support for java v8 software as it causes increase of usage risk, as recommended by SECCOM. Continuation of REQ-351.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
COMPLETION OF PYTHON LANGUAGE UPDATE (v2.7 → v3.8) (REQ-437)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Amy Zwarico Pawel Pawlak
Executive Summary - All remaining ONAP projects using Python shall reduce the risks associated with no community support for Python 2.7 software as it causes increase of usage risk, as recommended by SECCOM. Continuation of REQ-373.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
LOGS MANAGEMENT - PHASE 1: COMMON PLACE FOR DATA (REQ-441)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - fabian rouzaut Amy Zwarico Pawel Pawlak
Executive Summary - All ONAP applications should generate logs that can be collected by Kubernetes.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
COMPLETION OF HELM MIGRATION (v2 → v3) (REQ-442)
R8 PRESENTATION:
| ITEM | DETAILS |
| R8 Presentation | |
| Recording mp4 | |
| Audio only |
Key Contacts - Amy Zwarico Pawel Pawlak
Executive Summary - All ONAP projects using HELMv2 must migrate during the Honolulu release to HELMv3.
Business Impact - Improves the security posture of ONAP.
Business Markets - All operators, service providers and entities using ONAP.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
CONTINUATION OF CII BADGING SCORE IMPROVEMENTS FOR SILVER LEVEL (REQ-443)
Key Contacts - Tony Hansen Amy Zwarico Pawel Pawlak
Executive Summary - ONAP project will provide their feedback for the Application Security questions:
- Crypto Credentials Agility – ½ od apps in met and almost half not yet answered
- Implement Secure Design – 1/3 of projects did not answer
- Crypto Weaknesses – tests to be applied (3 including Morgan)
Projects that have already answered this question positively, should verify that the answer is still correct.
Continuation of REQ-350.
Business Impact - Improves the security posture of ONAP by lessening the risk.
Business Markets - All operators and service provider.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
Support for the Multi Tenancy in ONAP (REQ-463)
Key Contacts - Olivier Phénix Seshu Kumar Mudiganti Mike Elliott rodrigo lima
Executive Summary - Allow ONAP to run in a multi-tenant environment, where each tenant can manage access to his service designs, instances, and namespace-specific component
Business Impact - Make ONAP more appealing for operators and service providers, which often require different user groups to have different access level to resources.
Business Markets - All operators and service providers can leverage the multi-tenancy functionality of ONAP
Funding/Financial Impacts - Reduction in operations expense from using industry standard Interfaces.
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.
Identification of events that compromise the ONAP system (REQ-464)
Key Contacts - fabian rouzaut Amy Zwarico Pawel Pawlak
Executive Summary -
Implementation is done to identify events that compromise the system.
This information feedback is done because only an intervention can stop this risk.
The events are logged and according to rules have intervened according to the risks.
External system must be use to save and display the log
Secure protocol must be use to transfert the log between ONAP and external system
Business Impact - Improves the security posture of ONAP by lessening the risk.
Business Markets - All operators and service provider.
Funding/Financial Impacts - N/A
Organization Mgmt, Sales Strategies -There is no additional organizational management or sales strategies for this requirement outside of a service providers "normal" ONAP deployment and its attendant organizational resources from a service provider.