*Attending*
Chris Misra, U. Mass (Chair)
Brian Smith-Sweeney, NYU
Doug Pearson, Indiana/REN-ISAC
Steve Olshansky, Internet2
Dean Woodbeck, Internet2 (scribe)

*Carryover Action Items*
[AI] {Chris} Place on the agenda for the next call: boundary conditions for sharing data from shared darknet.
[AI] {Doug} In terms of programmatic interfaces with REN-ISAC data: {Doug} will determine concerns of Information resources at REN-ISAC; {Phil} will post his code to the list; {Brian} will discuss the hashing idea with his resources.
[AI] {Chris} Add WCLSCAN to agenda.
[AI] {Doug} Organize a call to have a discussion with those who want to actively participate in getting data from their institution to the shared darknet.
[AI] {Chris and Doug} Connect with NoX GigaPOP folks for Arbor information.
[AI] {Chris} Create project plan on using UMass for first data source for shared darknet.
[AI] {TBD} Normalizing data and noise reduction -- put together suggestions of what makes sense to be done at the end-user site and what makes sense to do centrally (to list and to wiki).

*Discussion Items*

*CSI2 meeting agenda*
Chris asked for modifications to the face-to-face working group meeting, which will take place March 5-6. The DNS hashing topic will be added to the agenda, as will a discussion of open source security tools.

There was a general discussion about the creation of security tools and whether REN-ISAC would be expected to support such tools, or if CSI2 would do that. If it is in the realm of CSI2, is the working group positioned to do that in the long-term. If the tool relates specifically to REN-ISAC, then REN-ISAC should provide support, but may not be funded to do so. This discussion will continue at the working group face-to-face.

Chris said that he sees the face-to-face as a public meeting, with a report that will be distributed.

*Other Items*

Brian reported that NYU is now officially contributing to shared darknet. He and others worked out some minor bugs and wrote a script to handle the conversion from NetFlow to the shared darknet. Brian uncovered a time discrepancy that may be related to the use of flow-tool. Chris asked that this item be added to the working group agenda. Doug reported that the time discrepancy is not a concern now, but could be down the road.

Chris also reminded working group members to register for the REN-ISAC session at the security professionals meeting. Attendance is capped at 50 and there are already 31 registered.

*Next call* The next call is scheduled for March 15 at 2:30 pm.