wg-all

Download

wg-all@lists.ogf.org

April 2023

1 participants
1 discussions

Two US NIST topics of interest: SP 800-223 Draft Document on HPC Security: Architecture, Threat Analysis, Security Posture and workshop on ZTA in Multi-Cloud
by Sill, Alan 03 Apr '23

03 Apr '23

Dear OGF colleagues, For your information and to recruit your input, the US NIST Draft document SP 800-223 provides guidance on standardizing and facilitating the sharing of HPC security postures by introducing a zone-based HPC system reference model that captures common features of HPC systems and serves as a foundation for a system lexicon. The draft also discusses HPC system threat analysis, security postures, challenges, and recommendations. https://csrc.nist.gov/publications/detail/sp/800-223/draft The public comment period for this initial public draft is open through April 7, 2022. Additional information can be found at the NIST HPC Security Working Group website.<https://csrc.nist.gov/Projects/high-performance-computing-security> Another related workshop on multi-cloud technologies and zero-trust architectures will be held May 22-24, 2023 (separate from the workshop held last month for the HPC effort mentioned above but addressing similar concepts and themes). A short summary from the web site for this event is included below. The link to this announcement is https://www.nist.gov/news-events/events/2023/05/4th-multi-cloud-conference-… The conference program features both leadership and actionable insight from experts in service mesh, ZTA, identity-centric security, open-source software development, and emerging NIST Special Publications. Presentations will cover a wide range of topics, including: * NIST recommendations for realizing zero trust principles in cloud-native applications and for securing artifacts in software supply chains * Approaches for authentication and access control for users, services, and devices in cloud-native applications in multi-cloud environments * The role of open source in cloud-native application security and compliance * Best practices and common pitfalls for implementing ZTA Policymakers, entrepreneurs, students, and cybersecurity professionals are encouraged to attend. Questions should be directed to the conference organizers. Alan Sill, Ph.D Managing Director, High Performance Computing Center Co-Director, NSF Center for Cloud and Autonomic Computing Adjunct Professor of Physics and Astronomy, Texas Tech University President, Open Grid Forum

1 0