DJRA1.3.3 – Security Area Work Plan and Status Report (M24)

Security Area Work Plan and Status Report: This deliverable contains the detailed work plan of the Security Services technical area compliant with the overall EMI Technical Development Plan. The plan is released early in the project life and updated every year including a status report on the achievements of the past 12 months compared to the planned objectives. This status report covers the current status and plans for the next years while the work plan at M36 will provide recommendations for further work.
This is an update of DJRA1.3.2 – Security Area Work Plan and Status Report (M12)

P1 external reviewers' report on D5.3.2 Security Area Work Plan and Status Report (M12)
This deliverable is an update of D5.3.1. Objective-level progress is reported in a status update. The workplan has been enhanced but it is still very conventional and conservative, taking a static view of the software stack. This is hardly surprising as the chosen analysis method reinforces this way of thinking. An alternative approach, starting from the perspective of attempting to understand the threat surface presented by the EMI software stack, followed by a consideration of “what it means to be secure in the grid” might reveal a number of additional dynamic and behavioural security issues that could additionally need to be resolved. Given the constraints imposed by the chosen approach, there are initial attempts to define how some of these tasks will achieve the anticipated capability defined in the respective objectives.

Schedule

• Author sends ToC to PEB 3-Feb
• Author sends high quality complete WP-leader approved first draft of deliverable for review 16-March
  NB. "Author/Assembler" will be away the last two weeks of March.

JRA1 internal JRA1 internal

Review Tracking

• 12/04/12 v0.3 sent to Shiraz, Jason, Enol and PEB for review; deadline 18/04
• 16/04/12 https://twiki.cern.ch/twiki/pub/EMI/ReviewDJRA133JD/EMI-DJRA1.3.3-v0.3.1.odt updated document from Jason Daivandy Review.
• 18/04/12 Enol sent his review.
• 18/04/12 Shiraz: I do not have any major comments except the formatting of the comparison table and an empty Annex at the end. John may proceed with the next version if these comments have already been addressed.
• 18/04/12 Version 0.4 will reflect all the changes.
• Deadline for additional comments - 25/04
• 24/04/12 v0.4.2 with additional sections to align with DNA1.3.3 objectives - deadline for comments 27/04
• Pending reviewers' acceptance of v0.4.3.
• 03/05/12 v0.4.3 accepted by Enol, Shiraz
• 03/05/12 PO comments received
• 04/05/12 v0.4.3 accepted by Jason
• Uploaded new version 1.1 that contains new text in section 2.8 and deletion in section 4.2.3
• Additional comments from Alberto
• 24/05/12 Final pdf uploaded to CDS
• 29/05/12 Revised with status change for
  • S4: Re-scoped to a limited set of use-cases

Reviewers

• S. Memon (JUELICH)
• J.Daivandy (JUELICH)
• E. Fernandez (CSIC)
• PO (NA1)