November 2006 - security-area

TC RG Proposed Shutdown
by Blair Dillaway 07 Dec '06

07 Dec '06

Dear Security Area Participants: We have recently completed a review of the security area groups. Based on the results, we propose to disband the Trusted Computing Research Group (TC RG). We have noted that during the past year: - There has been no substantive progress on the chartered deliverables - There have been no active discussions on the mailing list or regular conferences calls - Attendance at the TC RG sessions has been minimal We have queried the chairpersons about their continued interest and thoughts on re-invigorating this activity. Their responses indicate: - They are unable to commit to completing the existing draft use-case document - They do not have a proposal for re-chartering the group to engage a critical mass of participants We would appreciate hearing from anyone who is willing to commit to completing the chartered deliverables and participating in possible follow-on work. Unless a sufficient number of committed participants come forward in the next 2-3 weeks, we will start the process of shutting down the group. Regards, Blair Dillaway and David Groep, Security ADs

1 1

Re: [SECURITY-AREA] [TC-RG] TC RG Proposed Shutdown
by wenbo.mao＠hp.com 22 Nov '06

22 Nov '06

Dear All, While as a group leader I do feel responsible for not having been successful to generate a high interest in this work, we have nevertheless been working out the technicalities through other forums, and are not insuccessful in that regard. A Daonity demo system was released on November 17th in the Daonity Homepage: http://www.hpl.hp.com/personal/Wenbo_Mao/daonity/daonity.html (binary executable and source), where one may also find sufficient amount of supporting material. If at present we cannot convince the OGF community the usefulness of Trusted Computing for grid security (not your fault), we then agree to shut this group down. In the mean time, we shall continue working on the technicalities. For the interested, please keep an eye on the above URL. Thank you! Best regards, Wenbo Mao > Dear Security Area Participants: > > > > We have recently completed a review of the security area groups. Based > on the results, we propose to disband the Trusted Computing Research > Group (TC RG). We have noted that during the past year: > > - There has been no substantive progress on the chartered deliverables > > - There have been no active discussions on the mailing list or regular > conferences calls > > - Attendance at the TC RG sessions has been minimal > > > > We have queried the chairpersons about their continued interest and > thoughts on re-invigorating this activity. Their responses indicate: > > - They are unable to commit to completing the existing draft use-case > document > > - They do not have a proposal for re-chartering the group to engage a > critical mass of participants > > > > We would appreciate hearing from anyone who is willing to commit to > completing the chartered deliverables and participating in possible > follow-on work. Unless a sufficient number of committed participants > come forward in the next 2-3 weeks, we will start the process of > shutting down the group. > > > > Regards, > > Blair Dillaway and David Groep, Security ADs > > > > -- > tc-rg mailing list > tc-rg(a)ogf.org > http://www.ogf.org/mailman/listinfo/tc-rg

1 0

Topical OGF Levels of Assurance (LoAs) BoF and activity initiative
by David Groep 15 Nov '06

15 Nov '06

Dear all, The OGF Security Area would like to draw your attention to an initiative addressing topics around the concept of Levels of Assurance. We know or expect that at least quite a few of you are interested in this topic, and thus are likely to either participate and have an opinion on this... An initial description of the activity and possible directions are described below. Please note that this will be a topical activity BoF, and is not aimed to be a charter BoF or to necessarily create a new group. If there is sufficient momentum to address this topic (also) in the OGF context, we can subsequently discuss the organisational embedding in an existing or new group. So, if you are interested, please participate via the security area mailing list or the gforge Wiki and forum, whose URLs are listed below. A BoF session to discuss this activity will be organised during OGF19 (to be held in North Carolina on January 29 - February 2, 2007). You are very warmly invited to attend this event, which will be full of new activities in the security area. Best regards, Blair Dillaway and David Groep, (OGF Security ADs) Topical BoF on Levels of Assurance (LoAs) ----------------------------------------- Ideas around "Levels of Assurance" have been receiving more and more attention, with the advance of federations and Authentication and Authorization infrastructures. "LoA is defined as the strength of authentication required for a service provider to be assured that a resource access is only granted to users whose identities have been verified. It reflects the degree of confidence in an authentication process used to establish the identity of an entity (an individual or a software component) to whom the credential was issued, and the degree of confidence that the entity using the credential is indeed the entity that the credential was issued to." Ning Zhang of Manchester University has taken the initiative to bring up the discussion on this activity in the OGF context. Examples of questions that this activity could address are: - What are the existing definitions of LoA suited to Grid or VO environment? - How to apply LoA to safeguard Grid services/resources? - Are some onerous registration requirements or special condition stipulations due to perceived inadequacies in the strength of authentication? - Are there any limitations in terms of user accessibility, scalability and interoperability? The activity can include discussion on how operational procedures affect LoA, how the various parameters and factors influence the overall LoA value in grid/VO environments, and come up with recommendations on how these factors can be taken into account. The purpose here is to consult, and to seek comments and feedbacks from, the communities concerned (including service providers, from e-Science, e-Business and e-Gov) on their views on the definition and applications of LoA in achieving fine-grained access control. Everyone interested in such an activity is extremely welcome to attend this activity BoF session. If there is sufficient interest within OGF, the BoF can also discuss how the activity is best embedded in the OGF organisation; it is not necessarily the aim of this BoF to result in a new research or working group. More information: Security Area Wiki: https://forge.gridforum.org/sf/wiki/do/viewPage/projects.sec/wiki/LoAInitia… Document "e-Infrastructure Security: Levels of Assurance" https://forge.gridforum.org/sf/sfmain/do/downloadAttachment/projects.sec/wi… Discussion forum: https://forge.gridforum.org/sf/discussion/do/listTopics/projects.sec/discus… -- David Groep ** National Institute for Nuclear and High Energy Physics, PDP/Grid group ** ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

List invitation: OGSA-AuthN-BoF for grid services authentication issues
by Alan Sill 08 Nov '06

08 Nov '06

This is the last in a series of messages intended to announce a requested Birds-of-a-Feather session (BoF) at the Open Grid Forum OGF-19 meeting for discussion of Open Grid Services Architecture Authentication topics and activities. The list and its associated BoF are intended to carry out the steps for formation of an OGSA- AuthN work group. This message is being sent out widely to call your attention to the existence of a mailing list specific to this purpose. You may subscribe to the ogsa-authn-bof(a)ogf.org mailing list by sending a message to me or to David Groep <davidg(a)nikhef.nl> , or by visiting the following page: http://www.ogf.org/mailman/listinfo/ogsa-authn-bof Your participation is appreciated. This announcement will be sent to several relevant lists and people to extend the invitation as broadly as possible, but subsequent communication about the BoF will proceed through the above list. Subscription to the above list will be your method to ensure involvement in this process. Best, Alan Sill, Ph.D TIGRE Senior Scientist High Performance Computing Center TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ==================================================================== -- ogsa-authz-wg mailing list ogsa-authz-wg(a)ogf.org http://www.ogf.org/mailman/listinfo/ogsa-authz-wg

1 0