[Fiware-security] FI-WARE - WP6 Security issues (check & review)

[Olivier Festor]

Dear Pascal

I have added 2 issues linked to our expertise in  fuzzing regarding input data/events sanitization/tracing/validation. The updated list is attached to the mail.


Best Regards

/Olivier Festor

On Jun 28, 2011, at 3:07 PM, BISSON Pascal wrote:

> Dear colleagues,
>  
> Find attached to this email the latest version of the WP6 (Data/context management) input document to D2.1a High Level Description .
>  
> I would like you since appointed to monitor with us WP6 activity to carefully check and review (provide comments, suggested changes, add-ons) what have been drafted by Juanjo (TID) and completed by Boris (Telecom Italia).
>  
> Please put also this back into perspective of the security work we announced in WP8 and the security issues we identified from our side for what concerns WP6 (for your convenience I reattached the document produced by THA+ATOS+NSN).
>  
> Bear in mind it’s our duty to check in order to commit to security issues description we WP8 can share and agree with WP6.
>  
> Looking forward receiving your view and feedback on latest version of the Security issues which has been drafted for WP6 (bear in mind our aim is to have shared so jointly drafted – just because it will commit us and here more specifically T8.2 although not uniquely).
>  
> Feedback received would be discussed at our next audio conference (planned mid of this week so tomorrow or day after - @Daniel please urgently announced it to the team!).
>  
> Based on outcomes of this audio conf feedback would be provided to other team for what concerns text to be inserted and on which hwe can agree (for WP6 & WP4 this would be done by me or Daniel, for WP5 it would be done by Xavier and Richard, for WP3 by SAP and for WP7 by Wolfgang – that’s also why they are in cc of this email – of course others are more than welcome to support  us).
>  
> Last but not I can only urge SAP, FT, DT to send me and Daniel latest version of security issues they identified when going through respectively WP3, WP5 and WP7 input documents to D2.1a  (for WP5 in complement of the work initiated already by Thales/TRT-UK/Richard)
>  
> Hearing from all action owners.
>  
> Best Regards,
>  
> Pascal
> <FI-WARE High-Level Desc Data-Context Security_Extended_TI.doc><FI-WARE-Security Issues WP6 - WP8 input document THA-ATOS-NSN v1.0.doc>_______________________________________________
> Fiware-security mailing list
> Fiware-security at lists.fi-ware.eu
> http://lists.fi-ware.eu/listinfo/fiware-security

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20110630/6a5936c6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: FI-WARE-Security Issues WP6 - WP8 input document THA-ATOS-NSN-INRIA v1.0.doc
Type: application/msword
Size: 52224 bytes
Desc: not available
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20110630/6a5936c6/attachment.doc>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20110630/6a5936c6/attachment-0001.html>