|
VNF Security Requirements Refresh
Unfortunately, I have to cancel this week because we are using this time slot to meet about the ONAP ODL package. Weekly meeting to work on revisions to the VNF security requirements. -- Do not delete
|
Unfortunately, I have to cancel this week because we are using this time slot to meet about the ONAP ODL package. Weekly meeting to work on revisions to the VNF security requirements. -- Do not delete
|
By Amy Zwarico
·
|
|
Link to Docker and Kubernetes CIS Benchmarks
I uploaded the Docker and Kubernetes CIS Benchmark documents to the Security Subcommittee Best Practices page on the wiki: https://wiki.onap.org/display/DW/Docker+and+Kubernetes+Security Amy Zwar
|
I uploaded the Docker and Kubernetes CIS Benchmark documents to the Security Subcommittee Best Practices page on the wiki: https://wiki.onap.org/display/DW/Docker+and+Kubernetes+Security Amy Zwar
|
By Amy Zwarico
·
|
|
Canceled: VNF Security Requirements Refresh
Canceling for ONS. Weekly meeting to work on revisions to the VNF security requirements.
|
Canceling for ONS. Weekly meeting to work on revisions to the VNF security requirements.
|
By Amy Zwarico
·
|
|
onap seccom: communication matrix updated 2 messages
Hello Seccom, Please find enclosed a new version of the communication matrix trying to take into account the last remarks. All comments are wellcome. Best regards Natacha _____________________________
|
Hello Seccom, Please find enclosed a new version of the communication matrix trying to take into account the last remarks. All comments are wellcome. Best regards Natacha _____________________________
|
By natacha.mach@...
·
|
|
VNF Security Requirements 3 messages
Please review the following requirement and vote to accept or not. https://jira.onap.org/browse/VNFRQTS-457 https://jira.onap.org/browse/VNFRQTS-660 https://jira.onap.org/browse/VNFRQTS-661 https://ji
|
Please review the following requirement and vote to accept or not. https://jira.onap.org/browse/VNFRQTS-457 https://jira.onap.org/browse/VNFRQTS-660 https://jira.onap.org/browse/VNFRQTS-661 https://ji
|
By Amy Zwarico
·
|
|
Jira Cleanup 2 messages
We are cleaning up the SECCOM Jira. Please review the following tickets which have no owners and indicate whether you think that SECCOM should identify an owner to work on the ticket (+1) or close the
|
We are cleaning up the SECCOM Jira. Please review the following tickets which have no owners and indicate whether you think that SECCOM should identify an owner to work on the ticket (+1) or close the
|
By Amy Zwarico
·
|
|
AAF init container usage tracking
Dear SECCOM, Do you know who is tracking feature called “Use AAF init container to get TLS certificates” or where I can find list of JIRA tickets from all ONAP projects which are addressing mentioned
|
Dear SECCOM, Do you know who is tracking feature called “Use AAF init container to get TLS certificates” or where I can find list of JIRA tickets from all ONAP projects which are addressing mentioned
|
By Pawel Baniewski (Nokia)
·
|
|
M3 Checklist Updates
On the 2019-09-17 SECCOM call we discussed updates to the M3 checklist for CII badging requirements. Two other additions to the checklist were suggested. · Require projects to enable authentication on
|
On the 2019-09-17 SECCOM call we discussed updates to the M3 checklist for CII badging requirements. Two other additions to the checklist were suggested. · Require projects to enable authentication on
|
By Amy Zwarico
·
|
|
VNF Security Requirements Refresh for El Alto 2 messages
Scheduling a series of recurring meetings to refresh the VNF security requirements as part of the El Alto release. Please forward the invitation to others in your organization who should participate.
|
Scheduling a series of recurring meetings to refresh the VNF security requirements as part of the El Alto release. Please forward the invitation to others in your organization who should participate.
|
By Amy Zwarico
·
|
|
VNF Security Requirements Refresh
Weekly meeting to work on revisions to the VNF security requirements. -- Do not delete or change any of the following text. -- Join Webex meeting Meeting number (access code): 730 447 021 Meeting pass
|
Weekly meeting to work on revisions to the VNF security requirements. -- Do not delete or change any of the following text. -- Join Webex meeting Meeting number (access code): 730 447 021 Meeting pass
|
By Amy Zwarico
·
|
|
VNF Security Requirements Refresh for El Alto - 2019/9/5 Meeting Minutes 11 messages
Linda Horn provided a status update for the VNF certificate requirements The review period is over Many have added +1 to the comments for VNFRQTS-687, VNFRQTS-688, VNFRQTS-689, VNFRQTS-690, VNFRQTS-69
|
Linda Horn provided a status update for the VNF certificate requirements The review period is over Many have added +1 to the comments for VNFRQTS-687, VNFRQTS-688, VNFRQTS-689, VNFRQTS-690, VNFRQTS-69
|
By Amy Zwarico
·
|
|
[DMAAP][DCAE][POMBA][MSB][SO][MUSIC][PORTAL][SDNC][VNFSDK][CCSDK][CLI][ExtAPI] integration properties contain http endpoints
Hi teams, If you are in the list below, you are exposing http endpoints and the integration team is using them in testing as of M4 for elalto. As we move away from unsecured endpoints, we want to redu
|
Hi teams, If you are in the list below, you are exposing http endpoints and the integration team is using them in testing as of M4 for elalto. As we move away from unsecured endpoints, we want to redu
|
By Daniel Rose
·
|
|
Recommended Versions of software packages not currently covered by oparent.pom
Please see the Recommended Versions deck at https://wiki.onap.org/download/attachments/48531500/2019-09-10%20ONAPSECCOM%20-%20RecommendedVersions.pptx?api=v2 for the non-vulnerable (or less vulnerable
|
Please see the Recommended Versions deck at https://wiki.onap.org/download/attachments/48531500/2019-09-10%20ONAPSECCOM%20-%20RecommendedVersions.pptx?api=v2 for the non-vulnerable (or less vulnerable
|
By Amy Zwarico
·
|
|
FW: [PTL] OPARENT 2.1.0 available in nexus.onap.org
oparent 2.1.0 is updated with the latest non-vulnerable versions of commonly used packages where such versions exist.
|
oparent 2.1.0 is updated with the latest non-vulnerable versions of commonly used packages where such versions exist.
|
By Amy Zwarico
·
|
|
Vulnerabilities fixed within 60 days 3 messages
Dear SECCOM members, I've just analyzed status of OJSI tickets with a view to the "Vulnerabilities fixed within 60 days" CII Badging question. You can find the results in the attached excel. I plan to
|
Dear SECCOM members, I've just analyzed status of OJSI tickets with a view to the "Vulnerabilities fixed within 60 days" CII Badging question. You can find the results in the attached excel. I plan to
|
By Krzysztof Opasiak
·
|
|
VNF Security Requirements Refresh for El Alto - Minutes of 2019-08-29 meeting
We spent most of the meeting discussing the requirements to allow an operator to harden the configuration of a VNF and to monitor (audit) that configuration. (VNFRTS-456). Three cases were enumerated.
|
We spent most of the meeting discussing the requirements to allow an operator to harden the configuration of a VNF and to monitor (audit) that configuration. (VNFRTS-456). Three cases were enumerated.
|
By Amy Zwarico
·
|
|
CVE assigned for vulnerability in hibernate-validator
Hi, This is a note and warning about a vulnerability in hibernate-validator (CVE-2019-10219). The SafeHtml validator fails to properly sanitize payloads. This could result in an XSS attack[1]. The vul
|
Hi, This is a note and warning about a vulnerability in hibernate-validator (CVE-2019-10219). The SafeHtml validator fails to properly sanitize payloads. This could result in an XSS attack[1]. The vul
|
By Krzysztof Opasiak
·
|
|
slides for next SECCOM Crypto Focus Topic for next Monday's PTL call
Here are slides for our next SECCOM Crypto Focus Topic for next Monday's PTL call, about using secure protocols/versions instead of insecure ones. Review comments welcome. Tony
|
Here are slides for our next SECCOM Crypto Focus Topic for next Monday's PTL call, about using secure protocols/versions instead of insecure ones. Review comments welcome. Tony
|
By Tony Hansen
·
|
|
VNF Security Requirements Refresh for El Alto - Meeting Minutes 2019-8-22
We finished reviewing the CIS Docker Benchmark v1.2.0 and agreed to create VNF security requirements that point to the CIS Docker Benchmarks. I decided to create two requirements – one for the images
|
We finished reviewing the CIS Docker Benchmark v1.2.0 and agreed to create VNF security requirements that point to the CIS Docker Benchmarks. I decided to create two requirements – one for the images
|
By Amy Zwarico
·
|
|
MoM - CMPv2 and secure communication for Frankfurt
Thank you all for attending the meeting. Please see the MoM from the recommended Secure Communication targets for Frankfurt release. Presented proposal and video recording can be seen in wiki. Attenda
|
Thank you all for attending the meeting. Please see the MoM from the recommended Secure Communication targets for Frankfurt release. Presented proposal and video recording can be seen in wiki. Attenda
|
By Hampus Tjader
·
|
