Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

EGI CSIRT:SMG

From EGIWiki
Jump to navigation Jump to search


| Mission | Members | Contacts
| Incident handling | Alerts | Monitoring | Security challenges | Procedures | Dissemination



Objective

Develop, deploy and maintain security monitoring tools.

Tasks

  • Pakiti:
    • Further development
    • Monitor the result of central Pakiti server and raise alarm if necessary
    • Support NGIs in setting up a national Pakiti instance.
    • Improve support for non rpm based distributions.
  • Tools to trace user activity.
  • Nagios:
    • Further development
    • Security probes development and maintances
    • Deploy security probes within the existing Nagios framework
    • Support NGIs to intergate security probes into their local NGI Nagios framework
  • Explore the possibility of using APEL data for security monitoring and security incident handling purpose
  • Explore the possibility of creating a security monitoring dashboard to aggreate, consolidate and visualize monitoring results

Persons

Coordinator

  • Daniel Kouril, Czech Republic NGI

Volunteers

class="sortable"
Name NGI Home Organization Effort Available (PM)
David O'Callaghan Irland NGI TCD
Christos Triantafyllidis Greek NGI
Jinny Chien - ASGC
Daniel Kouril Czech Republic NGI CESNET
Michal Prochazka Czech Republic NGI CESNET
Dusan Vudragovic Serbia NGI AEGIS
Angela Poschlad German NGI KIT
Bartlomiej Balcerek Poland NGI WCSS (CYFRONET) 4
Emir Imamagic MD NGI
Riccardo Brunetti Italy NGI INFN
Guiseppe Misurelli Italy NGI INFN
Dorine Fouossong France NGI
Feyza Eryol TR NGI TUBITAK-ULAKBIM