|
|
| (19 intermediate revisions by 7 users not shown) |
| Line 1: |
Line 1: |
| {{egi-csirt-team-header|Security Monitoring Group}} | | {{egi-csirt-team-header|Security Monitoring Group}} |
| | | {{DeprecatedAndMovedTo|new_location=https://confluence.egi.eu/display/EGIBG/CSIRT+SMG}} |
| == Objective==
| |
| Security monitoring is a key component to security. It may enable the service managers to prevent, detect and contain security incidents as well as to detect weak spots in the infrastructure before they get misused. The EGI CSIRT contributes to security monitoring by developing a monitoring tools, promoting existing tools, performing security tests against the sites and providing advisories about deployment and usage of the tools.
| |
| | |
| == Goals of security monitoring == | |
| The EGI CSIRT strives to provide both high-level overviews summarizing current status and detailed information about particular issues identified in the infrastructure. While closely collaborating with the NGIs and sites, the EGI CSIRT does not provide a replacement for site and NGI level monitoring, however, the EGI CSIRT will recommend a basic set of monitoring tools that the NGIs and sites can use for security monitoring. In addition, the EGI CSIRT operates its own monitoring tools collecting information from the sites. The probes used are not intrusive and do not attempt to circumvent any security mehanisms and are not resource intensive. Results collected by these probes are only available to the EGI CSIRT members and communicated to the appropriate site security contacts.
| |
| | |
| Main tasks of the activity:
| |
| * Patch management using [http://pakiti.sf.net/ Pakiti]
| |
| * Tracing activities of the users
| |
| * Integration with Nagios
| |
| * Security monitoring dashboard
| |
| | |
| == Persons ==
| |
| === Coordinator ===
| |
| * Daniel Kouril (kouril@ics.muni.cz), Czech Republic NGI
| |
| | |
| === Participants ===
| |
| {| {{egi-table}} class="sortable"
| |
| !Name !! NGI !! Home Organization !! Effort Available (PM)
| |
| |-
| |
| |David O'Callaghan ||Irland NGI || TCD
| |
| |-
| |
| |Christos Triantafyllidis || Greek NGI ||
| |
| |-
| |
| |Jinny Chien || - || ASGC ||
| |
| |-
| |
| |Daniel Kouril ||Czech Republic NGI || CESNET
| |
| |-
| |
| |Michal Prochazka || Czech Republic NGI || CESNET
| |
| |-
| |
| |Dusan Vudragovic || Serbia NGI || AEGIS
| |
| |-
| |
| |Angela Poschlad || German NGI || KIT
| |
| |-
| |
| |Bartlomiej Balcerek || Poland NGI || WCSS (CYFRONET) || 4
| |
| |-
| |
| |Emir Imamagic || Croatia NGI ||
| |
| |-
| |
| |Riccardo Brunetti ||Italy NGI || INFN
| |
| |-
| |
| |Guiseppe Misurelli || Italy NGI || INFN
| |
| |-
| |
| |Dorine Fouossong || France NGI ||
| |
| |-
| |
| |Feyza Eryol || TR NGI || TUBITAK-ULAKBIM
| |
| |}
| |
The wiki is deprecated and due to be decommissioned by the end of September 2022.