WP7 Security Coordination 23/24 Jan 2002

1
WP7 SecurityCoordination23/24 Jan 2002

• David KelseyCLRC/RAL, UKd.p.kelsey_at_rl.ac.uk

2
Task 7.4 - Agenda

• New people Akos Frohner (CERN), Robert Harakaly
  (CNRS) also Sophie Nicoud (CNRS)
• Wednesday 23rd Jan 2002
• Deliverable D7.5
• Thursday 24th Jan 2002
• D7.5 (contd)
• Status and plans for WP6 Authorisation Group
  (Roberto)
• Status and plans for DataTAG WP4 and SecureGrid
  (Leon)
• Generic AAA model in Grids IETF presentation
  (Leon)
• Online Credential Retrieval (Akos)
• work in Hungarian Grid development of MyProxy
• Future plans (D7.6 Security Design and Release 2)
• Next meeting(s)

3
D7.5 (M15 report)

• Security Requirements and Testbed-1 report
• V0.1 7 Dec 2001
• V0.2 21 Jan 2002
• Much discussion on structure
• and scope
• E.g. Accounting is outside the scope (WP1)

4
D7.5 structure

• Ch1 Introduction
• Includes definition of security terminology
• Ch2 Executive summary
• Ch3 What is Security?
• Start with general description
• Function types
• Authentication, Authorisation
• Requirement classes
• Reliability, Security, Ease of use, Manageability
• Scope of Security in DataGrid and document
• Description of Globus GSI
• Assumptions

5
D7.5 structure (contd)

• Ch4 Security Requirements
• Some are needs and/or constraints
• Organised by function types
• Matrix of functions vs requirements
• Ch5 Security Implementation in Testbed-1
• Not too detailed, leave something for D7.6
• Ch6 Requirements satisfied by Testbed-1 and
  future plans

6
D7.5 (contd)

• V0.3 1st Feb 2002
• Structure agreed here will be implemented
• V1 15th Feb 2002
• Internal working version for contact with WP
• Individuals assigned to contact each WP
• Prepare full list of requirements
• Describe Testbed 1
• V1.1 1st March 2002
• Full text for review by group
• Prepare Chapter 6 Future plans
• V2 15th March 2002
• Ready for external review

7
D7.6 (M25)

• Security Design and Testbed 2
• Input
• Requirements from D7.5 and future plans
• From each WP
• EDG ATF
• Being re-convened (1st meeting in Paris)
• Need a representative from Security
• Security group and ATF must be complementary

8
Plans for release 2

• Not yet defined
• But WPs have own plans
• e.g. WP1 credential renewal, WP3 info services
• Input from full list of requirements in D7.5 and
  from WP contacts
• We have coordination role and duty to check
  security designs and implementations
• WP6 Authorisation group will test prototype CAS,
  together with WP1 and WP2 (soon?)
• Security group unlikely to develop any code
• Will be done by WPs, Authorisation group or
  DataTAG

9
Future meetings

• Wish to continue meeting with WP7 and DataTAG
• But should avoid parallel meetings
• Several people in common!
• We need half a day on Tuesday 5th March Paris
• Finalise D7.5
• Define future plans (Chapter 6 in D7.5)
• Next WP7 meeting? (April, May?)