[Fiware-security] FI-WARE Open Specifications - re-structured - Report on status + Request Actions to be performed by some of the task leads/GE owners (so please PROCEED Urgently !)

[BISSON Pascal]

Hi Kreshnik,

Good to see that things are now there and visible also through this link used by TID to also perform assessment of the work done. Also why I did my check using this link (as well).

Well sounds good in terms of compliance to the template provided. In the meantime I still see a problem with the link to the catalog entry that points not to the right instance (the link should be http://catalogue.fi-ware.eu/node/316 instead of http://catalogue.fi-ware.eu/node/318 btw that second  Security Monitoring GE should no more exist (so please delete it). The former one is one entered by Daniel but is still incomplete in the sense it is missing information (especially for Instances and Documentation sections) about the Service level SIEM feature. As such could you please check with Daniel and complete with information provided by ATOS (Susanna) do think you could re-use here information provided by ATOS in the Service-level SIEM entry they created on the catalog and then discard that entry. This at the end there should be only one entry on the catalog for Security Monitoring GE encompassing both features (Attack path engine and Service level SIEM) at least for V1 and obviously more for V2.

Last but not least and for Documentation section at Manual subsection please provide references as well to Manuals accompanying the Security Monitoring GE (e.g. Security Monitoring GE User and Programmer Guide, ...)

Thanks in advance for your cooperation and support,

Best Regards,
Pascal

De : MUSARAJ Kreshnik
Envoyé : jeudi 11 octobre 2012 12:58
À : BISSON Pascal; GIDOIN Daniel; antonio.garcia at atosresearch.eu; Susana Gonzalez Zarzosa; DI CERBO, Francesco; TRABELSI, Slim; Michael Osborne; ext Anja Lehmann; Seidl, Robert (NSN - DE/Munich); Wolfgang.Steigerwald at telekom.de; Goetze, Norbert (NSN - DE/Munich); Meyer, Gerald (NSN - DE/Munich); GASPARD Lucie
Cc : Fiware-security at lists.fi-ware.eu
Objet : RE: FI-WARE Open Specifications - re-structured - Report on status + Request Actions to be performed by some of the task leads/GE owners (so please PROCEED Urgently !)

Dear Pascal,

I had already terminated that task, albeit on another page as indicated by the received instructions. Normally the indicated links were provided in the resubmission cockpit:
https://forge.fi-ware.eu/plugins/mediawiki/wiki/fi-ware-private/index.php/Open_specification_resubmission_cockpit

Anyway, I added the same content at the http version of the wiki,  please review and let us know (NB: both links below point to the same content, redundancy between the two was not automatically assured this time).
https://forge.fi-ware.eu/plugins/mediawiki/wiki/fiware/index.php/FIWARE.OpenSpecification.Security.Security_Monitoring
http://forge.fi-ware.eu/plugins/mediawiki/wiki/fiware/index.php/FIWARE.OpenSpecification.Security.SecurityMonitoring

Many thanks in advance.

Best regards,
Kreshnik


---THALES GROUP RESTRICTED---

De : BISSON Pascal
Envoyé : jeudi 11 octobre 2012 12:13
À : GIDOIN Daniel; antonio.garcia at atosresearch.eu<mailto:antonio.garcia at atosresearch.eu>; Susana Gonzalez Zarzosa; MUSARAJ Kreshnik; DI CERBO, Francesco; TRABELSI, Slim; Michael Osborne; ext Anja Lehmann; Seidl, Robert (NSN - DE/Munich); Wolfgang.Steigerwald at telekom.de<mailto:Wolfgang.Steigerwald at telekom.de>; Goetze, Norbert (NSN - DE/Munich); Meyer, Gerald (NSN - DE/Munich); GASPARD Lucie
Cc : BISSON Pascal; Fiware-security at lists.fi-ware.eu<mailto:Fiware-security at lists.fi-ware.eu>
Objet : FI-WARE Open Specifications - re-structured - Report on status + Request Actions to be performed by some of the task leads/GE owners (so please PROCEED Urgently !)
Importance : Haute

Dear All,

This message is mainly targeted to Task lead and/or GE owners. It relates to a quick check I did perform the work done by Task leads/GE owners regarding the re-structuring of the contents of the wiki that relate to GEs in our Security chapter.   I based my review on what is now made available at:

http://forge.fi-ware.eu/plugins/mediawiki/wiki/fiware/index.php/Summary_of_FI-WARE_Open_Specifications#Security_Chapter

According to quick scan I've performed I noticed that:

·         Security Monitoring is pending and as such can't be assessed. @Daniel/@Kreshnik I know you are working on it but please make it available asap and ensure compliance to the template (see other GEs e.g. Data Handling or Privacy GE which followed that template)

·         Context-based security and Compliance GE, Data Handling GE, Privacy GE and Secure Storage Optional GE have been entered following instructions provided and are such can be assessed as conformant to the template provided (since they include Copyright section, Legal Notice, etc. So thanks to ATOS/Susana, SAP/Slim,Francesco, IBM/Michael,Anja and Thales(TAI)/Lucie who own those GEs. In the meantime I can only encourage them to perform final check to be sure they are fully conformant to what was requested.

·         IdM GE the way it has been entered is not conformant to the established template. So please NSN/Robert (with support of DT/Wolfgang whenever requested) make it conformant asap.

·         DB Anonimyzer GE is pending even if we may find a link the Open Spec API (preliminary for that GE). So please SAP/Francesco address and add that GE the way it should be (i.e. following instructions provided and making it compliant to the template provided).


Counting on each of the Task leads and GE owners having actions to perform to have them performed by EOB today to close the work on this. This simply because we are already beyond of schedule and have other actions to engage in.

Many thanks in advance for your cooperation and support and yes this will be re-assessed tomorrow at our weekly audio conf.

Best Regards,
Pascal


PS: Just to remind you about our goal here and instructions which were already provided to perform the work and comply to the template shared/agreed among each of the Chapters:

The goal is to create a wiki page per GE that comprise the complete specification of the GE.   Those wiki pages will help to produce the final FI-WARE GE Open Specifications deliverables to be resubmitted.

  You can easily produce the wiki page associated to a given GE by following the template with instructions provided at:
https://forge.fi-ware.eu/plugins/mediawiki/wiki/fi-ware-private/index.php/Open_specification_resubmission_template

  Probably, a first step before generating this page for the GE <GE-name> in Chapter <Chapter-name> is to modify the Architecture Description wiki page linked to that GE referred as FIWARE.ArchitectureDescription.<Chapter-name>.<GE-name>.   As indicated in the template+instructions above, you should introduce the following changes in the Architecture Description wiki page:

 *   You should include a Copyright section which lists the copyright holders
 *   You should include a Legal Notice section which incudes a reference to the Legal Notice that applies to your GE specifications
 *   You should include a description of the intended use/role of the GE in the Introduction section of the FI-WARE Architecture Description wiki page itself. You can reuse the information already provided in the FI-WARE_Product_Vision in section "Target usage" of your chapter/GE, but please duplicate the current information.
 *   Create a new page on the wiki named as FIWARE.OpenSpecification.Details.<chapter-name>.<ge-name>, where the contents of the "Open Specifications" section in the Architecture Description wiki page will be copied.
Ø  Please all GE owners check you duly created that new page.

 *   Drop the section "Open Specifications" that was there within the wiki page associated to the Architecture Description (you have copied its contents now in the new FIWARE.OpenSpecification.Details.<chapter-name>.<ge-name> page)
 *   On the RESTful open API specification of your GE the Intended Audience needs to be revised it should be changed to address reimplementers as potential target users:
"This specification is intended for both software developers and <any other potential user if applies>. For the former, this document provides a full specification of how to
"This specification is intended for both software developers and reimplementers of this API. For the former, this document provides a full specification of how to <explain-1>.

  Making the above changes per Achitecture Description of a given GE and then creating the corresponding wiki page for the complete Open Specifications is a task that may not take more than a few minutes per GE. WPL/WPA takes care of the whole chapter revision himself with the help of Task leads/GE owners.

TID already produced the wikipages for the Glossaries of all chapters and fixed their inline inclusion for the current wiki pages of the FI-WARE Product Vision.   This to save us some time ...

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20121011/dc727616/attachment.html>