February 2006 - security-area

First version of the security area roadmap published
by Olle Mulmo 15 Feb '06

15 Feb '06

All, Please take a look at the Security Area roadmap document. For now, use the security area list for any discussion or comments that you have on this document, or have them sent to me and Dane in private. The documents are flagged with public access, so you shouldn't have to be logged in to GridForge to access them. (I know there are a few people that appreciate that!) Word version: http://forge.ggf.org/projects/sec/document/draft-ggf- mulmo-security-roadmap-01/en/1 [or http://tinyurl.com/7jg8t] PDF version: http://forge.ggf.org/projects/sec/document/draft-ggf- mulmo-security-roadmap-01.pdf/en/1 [or http://tinyurl.com/afako] Please provide comments! /Olle

1 0

Agenda for GGF16 Authorization workshop - 16th Feb 2006
by Kelsey, DP (David) 14 Feb '06

14 Feb '06

Dear all, Here is the final agenda for Thursday's GGF16 Authorization workshop. We look forward to your participation. David Kelsey ------------------------------------------------ Dr David Kelsey Particle Physics Department Rutherford Appleton Laboratory Chilton, DIDCOT, OX11 0QX, UK e-mail: D.P.Kelsey(a)rl.ac.uk Tel: [+44](0)1235 445746 (direct) Fax: [+44](0)1235 446733 ------------------------------------------------ GGF16 Thursday, Feb 16 2006 Title: Grid Authorization - Interoperability Here & Now (Workshop) Abstract: This workshop will consider short-term (now and next two years) Grid Authorization and Policy implementations, requirements and issues. It will investigate what improvements can be made to encourage and facilitate interoperability between Grid operational infrastructures. It will also consider lessons learned from today's implementations for the Grid security standards activities in GGF for the longer-term future. The workshop will highlight the Life Science perspective with requirements from the biomed VO in EGEE and in the overall biomedical community. Location: Kozani Background: Much effort has been put into the work on Grid Authentication, culminating in the successful launch at GGF15 of the International Grid Trust Federation (IGTF). The work of IGTF and its three regional Policy Management Authorities ensures that Grid Users can obtain a single electronic identity (X.509 certificate) and use this on any Grid infrastructure which has decided to use the CA's from IGTF. Grid Authorization is much less mature. Many large-scale application communities (VOs) are global in nature and have the need to access multiple Grid infrastructures. While Authentication is performed at the employing institute level, the Authorization (AuthZ) assertions need to be controlled at the VO level. The VO (global) policy assertions then need to be combined with local (site-level) policy specifications before an Authorization decision can be made and enforced. There is a very important requirement for interoperability in AuthZ between Grids in terms of protocols and evaluation of the AuthZ/Policy assertions so that different implementations can interwork and reach the same AuthZ decisions. ---------------------------------------------------------------------------- Agenda - Session 1 - Thursday 16th February 2006 10.30-12.00 Grid Authorization - Interoperability Here & Now - #1 (Chair - Åke Edlund) 10.30-10.35 Welcome, introduction and aims of the workshop (David Kelsey) 10.35-11.00 The LHC experiments (particle physics) AuthZ requirements (David Kelsey) 11.00-11.25 The Biomed/EGEE AuthZ requirements (Christophe Blanchet/Rémi Mollon) 11.25-11.50 AuthZ in Open Science Grid (Bob Cowles) 11.50-12.00 Discussion ---------------------------------------------------------------------------- Agenda - Session 2 - Thursday 16th February 2006 13.30-15.00 Grid Authorization - Interoperability Here & Now - #2 (Chair: David Kelsey) Panel presentations & discussion - AuthZ interoperability issues and plans Von Welch TeraGrid/OSG interoperation issues David Groep EGEE framework and local PDP's Jens Jensen Data management AuthZ Yuri Demchenko GAAA/GT4 gap analysis Christos Kanellopoulos Ideas on interoperation/interoperability Olle Mulmo Future plans and directions (for GGF) leading into general discussion - recommendations for short-term and mid-term direction ---------------------------------------------------------------------------- Organizing Committee Christophe Blanchet (CNRS IBCP and EGEE biomed VO deputy) Vincent Breton (CNRS and EGEE Director of Applications activity) Bob Cowles (SLAC and OSG Security co-chair) Ake Edlund (KTH and EGEE Director of Security) David Groep (NIKHEF and IGTF chair) David Kelsey (CCLRC and LCG/EGEE JSPG chair) Olle Mulmo (KTH and GGF Security Area Director) Dane Skow (FNAL and GGF Security Area Director) Von Welch (NCSA and Globus Alliance)

1 0

Meeting at GGF16: Tuesday, 10:30am. Macedonia B
by Andrew Martin 14 Feb '06

14 Feb '06

The Trusted Computing Research Group meets tomorrow, Tuesday, at 10:30am in 'Macedonia B'. You are invited to participate. Agenda: 1. Meeting housekeeping, appoint note-takers etc. 2. Report on 'Taonity Project', Wenbo Mao Grid security being implemented using Trusted Software Stack 3. Discussion of draft use case document Published on Gridforge in December: https://forge.gridforum.org/projects/tc-rg/document/tc-rg-usecase/en/1 4. Next steps Should this group wind up upon the completion of these pieces of work, or re-charter? Input on the use case document --- in the shape of more use cases, or some review of what is there already --- would be very welcome. Also, please allow me to advertise the ad-hoc BoF on Virtualisation. "Grid applications of virtualisation technologies". CPU virtualisation has potential to provide strong separation of grid jobs, execution integrity guarantees, jobs packaged with their execution environments, easy job mobility, and much else. With availability of tools like VMWare and Xen, and new architectures from Intel and AMD, this is very much a "now" technology. The BoF is on Wednesday afternoon, at 3.30pm, in 'Pella'. At the moment, there are three short talks arranged (one speaker was unable to attend, at the last minute), to be followed by a discussion. More speakers would be welcome. Andrew

2 1

Final Agenda for FI-RG session 1:30 - 3:00 pm Tuesday, Feb 14
by Inder Monga 13 Feb '06

13 Feb '06

We welcome all of you to the FI-RG session tomorrow: Agenda: 1:30 Introduction, agenda, find notetaker, IPR statement - Inder Monga 1:35 Document discussion and classification - Ralph Niederberger Research Update: 2:10 "Various approaches toward dynamic firewall implementation" - Gian Luca Volpato, University of Hanover 2:25 Experiences with Firewalls in South Eastern Europe - Emanouil Atanassov 2:40 Force-10 Firewall update - Raju Shah 2:45 Token Based Firewalls - Leon Gommans. Thanks, Leon Gommans/Inder Monga

1 0

Update on GGF Shib meeting
by Von Welch 09 Feb '06

09 Feb '06

Update on the Shibboleth/Grid meeting at GGF: We have seven presenters lined up. Given our limited time, each will have 10 minutes (hard limit!) and I suspect that will eat up our first session. We'll then use the remaining time and second session to discuss collaboration and synergy. See you next week. Von When: Tuesday 3:30-500 and Wed 8:30-10am > http://www.ggf.org/gf/event_schedule/index.php?id=213 > http://www.ggf.org/gf/event_schedule/index.php?id=214 Where: Naoussa Speaker list: Andrew Martin - Oxford/CCLRC `ShibGrid' project Erik Vullings - MAMS David Chadwick Steven Pickles - SHEBANGS Christoph Witzig - SWITCH Richard Sinnott - NeSC Glasgow activities Von Welch - GridShib/MyProxy

1 1

NIST PKI Workshop Announcement
by Von Welch 04 Feb '06

04 Feb '06

> > 5th Annual PKI R&D Workshop at NIST in Gaithersburg, MD "Making > Cryptography Easy to Use" > > April 4-6, 2006 > > http://middleware.internet2.edu/pki06/ > > > > The mathematics of public key cryptography is delightful, and critical > to online security, but we still have much to learn about applying > it in > the real world in ways that are easy for humans to take advantage of. > Come join with experts from NIST, NIH, private industry and > universities > around the world for our fifth workshop on overcoming the challenges. > Peer-reviewed research papers will be interspersed with topical panels > during the two and a half day event. Learn from experts in the human > factors of security. Hear an keynote from Kelvin Yiu, Microsoft's > Lead > Program Manager for Windows Security. Get an update from leaders in > secure browser interfaces. Ask questions of panels on topics like > Digital Signatures; Email security and DKIM; Standards updates on X. > 509, > DNSSEC, Hashing and PKINIT; Globus; Revocation; Federal PKI and > E-authentication update; and Bridge to Bridge Interoperations. And as > always, take advantage of the opportunity for informal networking. > Please register by March 17. > >

1 0