Area 50.999999 Security Area Thoughts

Security Area

Area 50.999999Security Area ThoughtsJens JensenOGF 26, May 2009Chapel Hill, NC

Jens JensenSTFCs Rutherford Appleton Laboratorye-SciencePreviously in STFNGS, GridPP, UK e-Science CABkg in (pure) maths (representation theory)Postdoc in quantum crypto at RHULParticular interestsSecurity in data managementWhy StandardsDocumented protocol/experiencesPromote interoperationOpen processEnsure all requirements met (not hijacked by single community)Expose changes to protocolsNot owned by single personDissemination to other groupsShare use casesShare experiencesPromote reuseRole of Security Area(in OGF)Focus for Security WGs, RGs, and CGsNote security work in other groupsSecurity cuts across all standardsProvide expertiseCommon outlet for ongoing security workSWOTStrengthsOGF as standards groupStrong CAOPS groupSecurity groups draw from global pool of highly skilled peopleWeaknessesSee next slidesConcernsWorking on documentationPeople with time dont always have experiencePeople with experience often dont have timeConcernsWorking on documentationPeople with time dont always have experiencePeople with experience often dont have timeSWOTOpportunitiesIndustry Academic Spinoffs AcademicOGF OGCCloud vs GridEU security projectsThreatsKeep skills poolEncourage (commit) people to participateIncluding travel to OGF

Spinoffs (example)Cloud == GridAttracted to Grid but concerned about securityNeed for standards, eg LoALayers and complexity => difficult to explainCLIK: Can join Industry AcademicInterest from wide area of communitiesIncluding funding