[RU-NGI] Fwd: [Noc-managers] Draft of new EGI Software vulnerability handling procedure.

[Alexander Kryukov]

FYI


-------- Forwarded Message --------
Subject: [Noc-managers] Draft of new EGI Software vulnerability handling 
procedure.
Date: Fri, 31 Jul 2015 15:33:20 +0000
From: linda.cornwall at stfc.ac.uk
To: svg-rat at mailman.egi.eu, csirt at mailman.egi.eu, 
noc-managers at mailman.egi.eu, fedcloud-tf at mailman.egi.eu, 
scg-discuss at mailman.egi.eu, urt-discuss at mailman.egi.eu

Dear all,

We the SVG RAT have produced a new version of the EGI SVG issue handling 
procedure.

I'm sending this e-mail a bit more widely than previously, as

A lot has changed since we last revised it, including a wider variety of 
software being used in EGI, and use of VMs and the Federated Cloud.

I presented on reasons for change and the approach to this revised 
procedure at the OMB yesterday, and the slides are available at
https://indico.egi.eu/indico/conferenceDisplay.py?confId=2378

The new version of the document is available at:
https://documents.egi.eu/secure/ShowDocument?docid=2538

Concerning the UMD, (this is the first time I've cc'd urt discuss on 
this) I have said less about this than in the older version, but 
generalized to Technology Provider. I don't anticipate any significant 
change to the way we handle vulnerabilities in the UMD - this is more of 
a broadening of the procedure to cover the wider variety of software 
used in the EGI infrastructure, along with recognising that IRTF and 
SVG-RAT now work much more closely together to deal with all types of 
vulnerabilities.

Comments are welcome,

(For those who looked at the version I released on Monday - there are 
very few changes.)

Linda.


------------------------------------------------------------------
Dr Linda Cornwall,
Particle Physics Department,
STFC Rutherford Appleton Laboratory,
Harwell Oxford,
DIDCOT,
OX11 OQX,
United Kingdom

E-mail  Linda.Cornwall at stfc.ac.uk
Tel.    +44 (0) 1235 44 6138
Skype   linda.ann.cornwall


_______________________________________________
Noc-managers mailing list
Noc-managers at mailman.egi.eu
https://mailman.egi.eu/mailman/listinfo/noc-managers

-- 
A.Kryukov, PhD
Head of laboratory, SINP MSU
Phone: +7 495 939-3156