Area 50.999999 Security Area Thoughts

1. Area 50.999999Security Area Thoughts Jens Jensen OGF 26, May 2009 Chapel Hill, NC

2. Jens Jensen • STFC’s Rutherford Appleton Laboratory • e-Science • Previously in STF • NGS, GridPP, … • UK e-Science CA • Bkg in (pure) maths (representation theory) • Postdoc in quantum crypto at RHUL • Particular interests • Security in data management

3. Why Standards • Documented protocol/experiences • Promote interoperation • Open process • Ensure all requirements met (not hijacked by single community) • Expose changes to protocols • Not owned by single person • Dissemination to other groups • Share use cases • Share experiences • Promote reuse

4. Role of Security Area(in OGF) • Focus for Security WGs, RGs, and CGs • Note security work in other groups • Security cuts across all standards • Provide expertise • Common outlet for ongoing security work

5. SWOT • Strengths • OGF as standards group • Strong CAOPS group • Security groups draw from global pool of highly skilled people • Weaknesses • See next slides

6. Concerns Working on documentation People with time don’t always have experience People with experience often don’t have time

7. Concerns Working on documentation People with time don’t always have experience People with experience often don’t have time

8. SWOT • Opportunities • Industry  Academic Spinoffs  Academic • OGF  OGC • Cloud vs Grid • EU security projects • Threats • Keep skills pool • Encourage (commit) people to participate • Including travel to OGF

9. Spinoffs (example) • Cloud == Grid • Attracted to Grid but concerned about security • Need for standards, egLoA • Layers and complexity => difficult to explain • CLIK: Can join Industry  Academic • Interest from wide area of communities • Including funding