onap-seccom@lists.onap.org | Runtime Online dependency

Krzysztof Opasiak

#1317

Dear SECCOM,

Please find the attached proposal of SECCOM recommendation to TSC 
related to removal of runtime dependencies to the Internet resources.

Your feedback is very appreciated.

Best regards,
-- 
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

online_dependecies_removal.pptx

Pierre Close

#1318

Dear Krzysztof, SECCOM members,

Thanks a lot for your proposal.

After discussing with colleagues about it, please find below some feedback.

We agree with and support your proposal & recommendation, and they have suggested some more items, I hope they will be helpful/useful:

- inherit from approved ONAP base lines, and ensure that projects add their dependencies during their final image building (including all project known dependencies that are actually listed in the OOM offline installer repo); therefore it's each project responsibility to handle and manage correctly all their dependencies when building their images
- all containers should be running read-only except for writable elements like log files (and then all such elements should be written to volumes); in other words, all places where the application would be able to write are identified and listed (that would also avoid that an application avoid overwriting its own files in case of security breach)
- application user should only be able to have the minimal rights to execute its application files; user executing the application and user owning non-application-generated files should be different, and file holding user shall therefore only provide minimal read and execute access needed to the other users like the user executing the application
- it was also suggested that package managers are disabled after image building, but nevertheless this causes a potential issue for testing and debugging purposes; now, the user executing the application shall not be allowed to use the package managers (and that should already be the case normally)
- please note that my colleagues are not in favor of the OOM offline installer -- images should be final, as you are recommending

Also, ONAP deployment behind a proxy/corporate firewall can be complicated because of those runtime online dependencies, so it is also desirable to not have such online connections when deploying in such situations (container/pod expecting others, delays introduced, long start times, and so on) -- without counting on unknown or no pre-defined versions that would make things even more complicated.

Thanks and best regards,
Pierre & colleagues

Show quoted text

-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 00:04
To: onap-seccom@...
Cc: onap-seccom@...
Subject: [Onap-seccom] Runtime Online dependency - recommendation proposal

Dear SECCOM,

Please find the attached proposal of SECCOM recommendation to TSC related to removal of runtime dependencies to the Internet resources.

Your feedback is very appreciated.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

Krzysztof Opasiak

#1321

On 05.06.2019 12:44, Close, Pierre wrote:
Dear Krzysztof, SECCOM members,

Thanks a lot for your proposal.

After discussing with colleagues about it, please find below some feedback.

We agree with and support your proposal & recommendation, and they have suggested some more items, I hope they will be helpful/useful:

- inherit from approved ONAP base lines, and ensure that projects add their dependencies during their final image building (including all project known dependencies that are actually listed in the OOM offline installer repo); therefore it's each project responsibility to handle and manage correctly all their dependencies when building their images+1 That's exactly main goal of this recommendation:)

- all containers should be running read-only except for writable elements like log files (and then all such elements should be written to volumes); in other words, all places where the application would be able to write are identified and listed (that would also avoid that an application avoid overwriting its own files in case of security breach)+1 fully agree and support this.

- application user should only be able to have the minimal rights to execute its application files; user executing the application and user owning non-application-generated files should be different, and file holding user shall therefore only provide minimal read and execute access needed to the other users like the user executing the application+1 it looks like you know all my dreams:)

- it was also suggested that package managers are disabled after image building, but nevertheless this causes a potential issue for testing and debugging purposes; now, the user executing the application shall not be allowed to use the package managers (and that should already be the case normally)Hmm I'd say that making the filesystem read only should be enough as you 
won't be able to install anything unless you remount fs to rw. This 
should be good enough protection if app is running as a non-root but on 
the other hand allow for some debugging after accessing container with a 
root shell

- please note that my colleagues are not in favor of the OOM offline installer -- images should be final, as you are recommendingWe also don't like it. We see it's current design as a temporary walk 
around and that's why my colleagues who are working on that asked me for 
a help to fix this.


Also, ONAP deployment behind a proxy/corporate firewall can be complicated because of those runtime online dependencies, so it is also desirable to not have such online connections when deploying in such situations (container/pod expecting others, delays introduced, long start times, and so on) -- without counting on unknown or no pre-defined versions that would make things even more complicated.Yes, that's also one of deployment use cases for offline-installer.

As I strongly agree with items pointed out by your colleagues please 
tell me how would you like to proceed. Would you like to prepare a 
separate recommendation with items you mentioned or you would prefer me 
to extend my recommendation and make it more generic to cover also those 
items?

Best regards,
-- 
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

Pierre Close

#1324

Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.

Thanks and best regards,
Pierre

Show quoted text

-----Original Message-----
From: Krzysztof Opasiak <k.opasiak@...> 
Sent: Wednesday, June 05, 2019 14:37
To: Close, Pierre <pierre.close@...>; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 12:44, Close, Pierre wrote:
Dear Krzysztof, SECCOM members,

Thanks a lot for your proposal.

After discussing with colleagues about it, please find below some feedback.

We agree with and support your proposal & recommendation, and they have suggested some more items, I hope they will be helpful/useful:

- inherit from approved ONAP base lines, and ensure that projects add 
their dependencies during their final image building (including all 
project known dependencies that are actually listed in the OOM offline 
installer repo); therefore it's each project responsibility to handle 
and manage correctly all their dependencies when building their images+1 That's exactly main goal of this recommendation:)

- all containers should be running read-only except for writable 
elements like log files (and then all such elements should be written 
to volumes); in other words, all places where the application would be 
able to write are identified and listed (that would also avoid that an 
application avoid overwriting its own files in case of security 
breach)+1 fully agree and support this.

- application user should only be able to have the minimal rights to 
execute its application files; user executing the application and user 
owning non-application-generated files should be different, and file 
holding user shall therefore only provide minimal read and execute 
access needed to the other users like the user executing the 
application+1 it looks like you know all my dreams:)

- it was also suggested that package managers are disabled after image 
building, but nevertheless this causes a potential issue for testing 
and debugging purposes; now, the user executing the application shall 
not be allowed to use the package managers (and that should already be 
the case normally)Hmm I'd say that making the filesystem read only should be enough as you won't be able to install anything unless you remount fs to rw. This should be good enough protection if app is running as a non-root but on the other hand allow for some debugging after accessing container with a root shell

- please note that my colleagues are not in favor of the OOM offline 
installer -- images should be final, as you are recommendingWe also don't like it. We see it's current design as a temporary walk around and that's why my colleagues who are working on that asked me for a help to fix this.

Also, ONAP deployment behind a proxy/corporate firewall can be complicated because of those runtime online dependencies, so it is also desirable to not have such online connections when deploying in such situations (container/pod expecting others, delays introduced, long start times, and so on) -- without counting on unknown or no pre-defined versions that would make things even more complicated.Yes, that's also one of deployment use cases for offline-installer.

As I strongly agree with items pointed out by your colleagues please tell me how would you like to proceed. Would you like to prepare a separate recommendation with items you mentioned or you would prefer me to extend my recommendation and make it more generic to cover also those items?

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

Krzysztof Opasiak

#1338

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the 
result in attachment.

Feel free to comment & modify.

Best regards,
-- 
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

online_dependecies_removalv3.pptx

ZWARICO, AMY <az9121@...>

#1341

Very nice.

I made minor wording changes to slides 1,4,5,6
The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy

Show quoted text

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the 
result in attachment.

Feel free to comment & modify.

Best regards,
-- 
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

online_dependecies_removalv4.pptx

Pierre Close

#1343

Thank you Krzysztof for the additions, and Amy for the changes -- all those look very good.

Thanks again!

Best regards,
Pierre

Show quoted text

-----Original Message-----
From: ZWARICO, AMY 
Sent: Wednesday, June 05, 2019 23:14
To: k.opasiak@...; Close, Pierre <pierre.close@...>; onap-seccom@...
Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

Pawel Pawlak

#1345

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations
FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency 

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030 

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku. 
__________________________________________________________________ 
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

Show quoted text

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

online_dependecies_removalv5.pptx

ZWARICO, AMY <az9121@...>

#1347

I found another typo and made some other minor wording changes.

Show quoted text

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org
Sent: Thursday, June 06, 2019 7:33 AM
To: onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations
FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency 

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030 

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku. 
__________________________________________________________________ 
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

online_dependecies_removalv6.pptx

natacha.mach@...

#1348

hello,

Thanks for the comments, and here are some remarks for understanding first.
I hopr that we could discuss this document next week?

Regards
natacha
________________________________________
De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...]
Envoyé : jeudi 6 juin 2019 21:41
À : PAWLAK Pawel O-PL; onap-seccom@...
Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I found another typo and made some other minor wording changes.

Show quoted text

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org
Sent: Thursday, June 06, 2019 7:33 AM
To: onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations
FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku.
__________________________________________________________________
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

Dublin Security VNFRQTS updates v6nmach.docx

Horn, Linda (Nokia - US/Murray Hill)

#1350

Natacha,

Thank you for reviewing.  My comments are in the attached doc.  BTW there is a version v7 now but it has minor changes so your comments are still valid.

Linda 
----------------------------------------------------------------------------------- 
Linda S. Horn, DMTS
Cloud RAN Solution Definition and Architecture
Mobile Networks, Nokia    
Phone:  +1-908-679-6580

Show quoted text

-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of natacha.mach via Lists.Onap.Org
Sent: Friday, June 07, 2019 10:19 AM
To: ZWARICO, AMY <az9121@...>; PAWLAK Pawel O-PL <pawel.pawlak3@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

hello,

Thanks for the comments, and here are some remarks for understanding first.
I hopr that we could discuss this document next week?

Regards
natacha
________________________________________
De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@... Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I found another typo and made some other minor wording changes.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org
Sent: Thursday, June 06, 2019 7:33 AM
To: onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku.
__________________________________________________________________
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

Dublin Security VNFRQTS updates v6nmach lshorn.docx

Pawel Pawlak

#1372

Hello Linda,
Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting.
Please let us know your availabilities.

Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations
FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency 

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030 

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku. 
__________________________________________________________________ 
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

Show quoted text

-----Original Message-----
From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@...] 
Sent: Wednesday, June 12, 2019 9:18 PM
To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@...
Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Natacha,

Thank you for reviewing.  My comments are in the attached doc.  BTW there is a version v7 now but it has minor changes so your comments are still valid.

Linda 
----------------------------------------------------------------------------------- 
Linda S. Horn, DMTS
Cloud RAN Solution Definition and Architecture
Mobile Networks, Nokia    
Phone:  +1-908-679-6580

-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of natacha.mach via Lists.Onap.Org
Sent: Friday, June 07, 2019 10:19 AM
To: ZWARICO, AMY <az9121@...>; PAWLAK Pawel O-PL <pawel.pawlak3@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

hello,

Thanks for the comments, and here are some remarks for understanding first.
I hopr that we could discuss this document next week?

Regards
natacha
________________________________________
De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@... Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I found another typo and made some other minor wording changes.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org
Sent: Thursday, June 06, 2019 7:33 AM
To: onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku.
__________________________________________________________________
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

Horn, Linda (Nokia - US/Murray Hill)

#1374

Pawel,

Before or after the SECCOM call on July 16 is fine with me - whichever is better for others.

Linda 
----------------------------------------------------------------------------------- 
Linda S. Horn, DMTS
Cloud RAN Solution Definition and Architecture
Mobile Networks, Nokia    
Phone:  +1-908-679-6580

Show quoted text

-----Original Message-----
From: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@...> 
Sent: Wednesday, June 26, 2019 3:02 AM
To: Horn, Linda (Nokia - US/Murray Hill) <linda.horn@...>
Cc: onap-seccom@...
Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Hello Linda,
Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting.
Please let us know your availabilities.

Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency 

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030 

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku. 
__________________________________________________________________
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@...]
Sent: Wednesday, June 12, 2019 9:18 PM
To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@...
Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Natacha,

Thank you for reviewing.  My comments are in the attached doc.  BTW there is a version v7 now but it has minor changes so your comments are still valid.

Linda
-----------------------------------------------------------------------------------
Linda S. Horn, DMTS
Cloud RAN Solution Definition and Architecture
Mobile Networks, Nokia    
Phone:  +1-908-679-6580

-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of natacha.mach via Lists.Onap.Org
Sent: Friday, June 07, 2019 10:19 AM
To: ZWARICO, AMY <az9121@...>; PAWLAK Pawel O-PL <pawel.pawlak3@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

hello,

Thanks for the comments, and here are some remarks for understanding first.
I hopr that we could discuss this document next week?

Regards
natacha
________________________________________
De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@... Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I found another typo and made some other minor wording changes.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org
Sent: Thursday, June 06, 2019 7:33 AM
To: onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...
Best regards

Paweł Pawlak

ONAP SECCOM Chair
Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.
Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa
tel. +48 22 699 52 17
fax +48 22 857 99 86
tel. mob. +48 501 501 030

   Czy musisz drukować tę wiadomość? Pomyśl o środowisku.
__________________________________________________________________
Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY
Sent: Wednesday, June 5, 2019 11:14 PM
To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy
-----Original Message-----
From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org
Sent: Wednesday, June 05, 2019 4:01 PM
To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,

It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

Hampus Tjader

#1383

Hi,

I will not be able to attend the review meeting of 16^th July due to my vacation. Please see the provided comments from my company in the attachment. We see the modification of N-3 requirement as an important update before final approval.

Best regards,

Hampus

Hampus Tjäder

4G5G Product Architecture O&M and Security

Ericsson

Datalinjen 4

58330, Linköping, Sweden

Mobile: +46 107113292

ericsson.com

Show quoted text

-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of Horn, Linda (Nokia - US/Murray Hill) via Lists.Onap.Org
Sent: den 26 juni 2019 14:31
To: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@...>
Cc: onap-seccom@...
Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Pawel,

Before or after the SECCOM call on July 16 is fine with me - whichever is better for others.

Linda

-----------------------------------------------------------------------------------

Linda S. Horn, DMTS

Cloud RAN Solution Definition and Architecture

Mobile Networks, Nokia

Phone: +1-908-679-6580

-----Original Message-----

From: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@...>

Sent: Wednesday, June 26, 2019 3:02 AM

To: Horn, Linda (Nokia - US/Murray Hill) <linda.horn@...>

Cc: onap-seccom@...

Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Hello Linda,

Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting.

Please let us know your availabilities.

Best regards

Paweł Pawlak

ONAP SECCOM Chair

Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.

Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa

tel. +48 22 699 52 17

fax +48 22 857 99 86

tel. mob. +48 501 501 030

 Czy musisz drukować tę wiadomość? Pomyśl o środowisku.

__________________________________________________________________

Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----

From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@...]

Sent: Wednesday, June 12, 2019 9:18 PM

To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@...

Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal

Natacha,

Thank you for reviewing. My comments are in the attached doc. BTW there is a version v7 now but it has minor changes so your comments are still valid.

Linda

-----------------------------------------------------------------------------------

Linda S. Horn, DMTS

Cloud RAN Solution Definition and Architecture

Mobile Networks, Nokia

Phone: +1-908-679-6580

-----Original Message-----

From: onap-seccom@... <onap-seccom@...> On Behalf Of natacha.mach via Lists.Onap.Org

Sent: Friday, June 07, 2019 10:19 AM

To: ZWARICO, AMY <az9121@...>; PAWLAK Pawel O-PL <pawel.pawlak3@...>; onap-seccom@...

Cc: onap-seccom@...

Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

hello,

Thanks for the comments, and here are some remarks for understanding first.

I hopr that we could discuss this document next week?

Regards

natacha

________________________________________

De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@... Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I found another typo and made some other minor wording changes.

-----Original Message-----

From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org

Sent: Thursday, June 06, 2019 7:33 AM

To: onap-seccom@...

Cc: onap-seccom@...

Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

I have corrected 2 typos...

Best regards

Paweł Pawlak

ONAP SECCOM Chair

Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST

Orange Polska S.A.

Corporate Services Agency

Obrzeżna 7, 02-691 Warszawa

tel. +48 22 699 52 17

fax +48 22 857 99 86

tel. mob. +48 501 501 030

 Czy musisz drukować tę wiadomość? Pomyśl o środowisku.

__________________________________________________________________

Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.

-----Original Message-----

From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY

Sent: Wednesday, June 5, 2019 11:14 PM

To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@...

Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

Very nice.

I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.

-Amy

-----Original Message-----

From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org

Sent: Wednesday, June 05, 2019 4:01 PM

To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@...

Cc: onap-seccom@...

Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal

On 05.06.2019 15:58, Close, Pierre wrote:

> Hello Krzysztof,

>

> It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.

I tried to merged your remarks into the presentation, you can see the result in attachment.

Feel free to comment & modify.

Best regards,

--

Krzysztof Opasiak

Samsung R&D Institute Poland

Samsung Electronics

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.

Thank you.

Dublin Security VNFRQTS updates v7 - Ericsson comments.docx