50 likes | 62 Views
This update provides information about the JSPG SSC_1 Security Service Challenge Level 1, its objective, timeline, and execution status. The challenge focuses on investigating audit trace capabilities and communications channels in the Workload Management System.
E N D
SSC_1Security Service Challenge level 1An update for the JSPG, 9 – 10 March 2006 Pål S. Anderssen CERN - IT JSPG 9-10 March 2006 - 1
SSC_1 March 2006 update Objective The goal of the LCG/EGEE Security Service Challenge Level 1 (SSC_1), is to investigate whether sufficient information is available to be able conduct an audit trace as part of an incident response, and to ensure that appropriate communications channels are available. SSC_1 challenges the Workload Management System (WMS): Resource Broker (RB) and Compute Element (CE) JSPG 9-10 March 2006 - 2
SSC_1 March 2006 update Time line • Principal site of each ROC challenged: June 2005 • 9/11 ROCs were able to respond • Debriefing report out August 2005 • Changes to the procedure: • More proactive follow up • Challenge passed over to the ROCS 14 October 2005 • Response from the first ROC November 2005 • First reminder sent 9 January 2006 • 1 incorrect addressee clarified • 4 acknowledgements • Escalation reminder sent 3 February 2006 • 1 additional acknowledgement • Status as per 9 March 2006 • 8/11 ROCs are recorded as executing the challenge • ~118 sites have responded JSPG 9-10 March 2006 - 3
ROC SSC_1 execution: Status as per 07 March 2006 JSPG 9-10 March 2006 - 4
SSC_1 March 2006 update Tthe SSC twiki is here: https://twiki.cern.ch/twiki/bin/view/LCG/LCGSecurityChallenge I thank you for the attention… JSPG 9-10 March 2006 - 5