1. David Kelsey (STFC-RAL)
EGI Security
David Kelsey (STFC-RAL)
Chair EGI Security Policy Group

2. European Grid Infrastructure
EGI Security

3. Organisation of EGI Security
Security Coordination Group (SCG)
Security Policy Group (SPG)
Software Vulnerability Group (SVG)
EGI CSIRT (TI certified)
Incident response, monitoring, security challenges, training
IGTF/EUGridPMA
Funded by NGIs, EGI.eu, EU H2020 (EGI-Engage)
A lot of cross-membership
Core team of ~ 8-12 people (not all full-time)
Part of more general EGI Operations
EGI Security

4. Classic Grid Technical Security
Authentication
IGTF X.509 PKI certificates
User registers with Virtual Organisation (VO)
Authorisation (on multiple infrastructures)
VOMS issues X.509 attribute certificates
VO membership, Groups, Roles
Local authorisation
LCAS, LCMAPS, ARGUS, …
EGI CSIRT can suspend compromised credentials
Global ARGUS policy
EGI Security

5. Developments Funded by EGI-Engage EGI Federated Clouds service
New trust model, policies and procedures
EGI Long Tail of Science service
Hide certificates from users
Federated login, credential translation, etc
Addressing different Levels of Assurance
In collaboration with EU H2020 AARC project
EGI Security

6. Future We already have collaborated well with others
Joint training events with EUDAT and PRACE
Aim for stronger collaboration on incident handling
And sharing intelligence
Organise more joint training events
More on risk assessment, standards, best practices
Joint bids for future funding opportunities
The agenda of this WISE meeting is all VERY relevant!
EGI Security